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I. INTRODUCTION 


pee GENERAL 

Pye conmana., Conerol and Communications (C3) system must 
@emaole to successfully perform the following basic functions: 

i Detection of targets within its surveillance area 
limits by means of various search sensors. These sensors 
ieeeepe mounted on mobile or fixed platforms. 

me (nacKkineggot targets, as long as they remain within 
m@enceocraphical area of interest. This is achieved bv the 
Mere Oot fixed or mobile tracking systems. 
melas clilGatlon Of Cargets atteér aetection by means 
@eeidentification devices and/or association of present to 
Mmeeviously obtained information. 

meewicplay positional information considering all targets 
Mmenin the surveillance area limits onto plots and/or large 
Screen displays. 

mee storing tactical information into data bases for use 
Mamene near or more distant future. 

DecOontrol of weapon and support systems, to attack the 
Meee t{(s) atter permission has been granted. This is accom- 
piished by providing target behaviour parameters to the Fire 
Control Systems (FCS) and the various defensive systems such 
Mmelcectronic Support Measures (ESM), Electronic Counter- 


Measures (ECM), decoys, etc. 





itm rcutty OF accomplishing the above functions 
Meries Significantly depending on: 


a. the technological advance in each of the referred 
application areas. 


b. The effectiveness of human interaction with the 
Svceche(tGbainine, Moblvaltion and emotional factors). 


Today's trend is to replace the functions formerly per- 
menmed by humans with computer controlled functions, up to 
@@enpOint Of leaving to the humans only the ultimate decision 
Mmerene function, and the option to override the system 
Meuehorized personnel). 

MMmrimecrons Oreuie CS Systems have undergone develop- 
meme Over the last twenty years and many computer applications 
Memes been successful. For instance, a computer can automati- 
meme read" information directly from the radar receiver, 
Mane the conversion of its coordinates (polar to Cartesian), 
Mer, track, store the information into a database and, if 
meemred, teed data to a weapons control system to enable it 
Mmemaestroy the target. 

Pestiuvctiianece SvStem acts as part of a C35 svstem which 


memicdles the runctions of detection, tracking, classification 


2; 
Mma information storing [Ref. 1]. Detection of an object 
Saould always result in alerting the decision maker. This 
memene done through means of iniormation display. Figure 


1-1 illustrates how a surveillance system fits in the process 


Seedandling a typical "event" [Ref. 2]. 
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’@— Surveillance System 


_-t 


i 

§ 

1 

j 

eee Commander Orders Response 
Event Recognized Alertied Decision Received Preempted 


ea ee a a ee: 
—————— 


pai: | Wee nnonoloo Leal Sequence of 
Buchu maandling in CS. 

Arter the Commander has been alerted, a decision on the 
mepropriate reaction to the threat is made. This function 
Smee accomplished either as a pure human aided decision or 
aS an automated response process (Aegis system). 

Communications will ensure that the above decision is 
Memsomitted and received in such a way that delays are mini- 
feed and message context is highly reliable. This way the 
meeers Will be received “in time'’ and the decided response 
will be initiated. 

Finally, the Commander should be equipped with mechanisms 
meer ocedures enabling him to control the correct execution 
of the issued orders. These procedures reflect the second 


eeeement Of the C5 triad, namely the "control". 


i 





fw ORPOSE OF THESIS 
iieepunpose Of this thesis is to explore the use of the 
recently developed Large Scale Integrated (LSI) circuit tech- 
memoogy, the fiber-optic communications technology and some 
mewly developed operating systems concepts in order to build 
a Command, Control and Communications (C35) system. The thesis 
Seemers a preliminary design of the surveillance portion of 
Such a C3 system which is based on a distributed local net- 
meen CONCepts and which contains processing nodes of the 
Metwork built from multi-microcomputer systems. The network 
Memeonare ticd together with a fiber-optic double ring struc- 
mere which permits single failures of either a link or a 
Memputational node without causing system's failure. The 
Meregork nodés consist of a multiprocessor svstem of single 
board computers (SBC) sharing common memory for shared data. 
Mee operatins system of each network node is distributed 
meme the SBC's in the node and the operating svstem of the 
Meework 1S an extension of the operating system at each 
network node. 
The advantages such a system offers are: 

mer camiure tolerance at both the network and node levels. 

fm Computation load balancing. 
fee EXpandability at both the network and node levels. 


ee LOW Nardware cost. 





meentoh system capacity. 


eee lmerecasiogd Sw@rviveability (through decentralization). 


lo 





Sueeneworner hand, the price that has to be paid is 
expressed in the following drawbacks: 
Miles prepescd architecture 1S untried (high risk). 
ee ihe operating system becomes more complex as a result 
@f the implementation of data and process distribution 
(in contrast to the ones used in centralized systems). 
Meracmonstcraee how the above concepts can be implemented, 
Memmolitied model of a Tactical Surveillance System will be 
Meecribed. The design of the system will be applicable to 
most geographical environments and will be based on some 


meds Expressed in the open literature on surveillance sys- 


tems plus the author's 21 years of experience in Naval Tactics. 


fees SYSTEMS 

Some of the existing Command, Control and Communications 
meemeesystems will be overviewed in this section. Most of 
these systems are operational today. Since they belong to 
Mepererent generations, they will be described in a chronolog- 
Meweorder. They, in some respect, reflect the state-oft-the- 
Peeein both hardware and software during the time period 
miey were designed. 

Ps an aggregate Naval system, C3 touches on a number of 
Gemated functions such as intelligence, surveillance, navi- 
Seon and logistics. A C3 system must provide the means 
whereby military decision makers have access to the informa- 
Meon that these other functions provide. So, most of the 


Memoystems which are in operation today are tightly or loosely 





linked with systems dedicated to one or more of these 
metated functions. 
nom Dacwmromemnaeemid 50'S sy the three services of the 
amemeenrined POrces were greatly concerned with the threat 
from high speed aerial attacks. They contracted with the 
maeyverSity of [illinois Control System Laboratory to explore 
mmemuse Of digital computers for the rapid solution of the 
air defense problem using information received and correlated 
from a network of search radars [Ref. 3]. The growing threat 
bo torces afloat and ashore, coupled with the diminishing 
meg@emavailable to react, spurred the investigation of computer 
Mestance for C5 from World War II on. Up to then, various 
attempts to adapt the technology of analog computers had 
Mmsacistactory results. The systems were complex, limited 
mm Capacity and had little potential for growth. The new 
era gave rise to some successful C3 systems. 
1. Semi-Automatic Ground Environment (SAGE) Svstem 

[t was designed by IBM for the Air Force and is still 
@eerational. It consists of a network of air search radars 
meeeover northern U.S. and Canada. 

hie weeimeameconpurer Or the system has data on posi- 
tions of both friendly and enemy aircraft (weapons, inter- 
memeors, readiness, fuel, etc.) so aS to keep a continuous 
meqek On them and enable the coordination of the air defense 


merivities. 
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meee aval Jactteal Data System (NTDS) 
iteevasmeacwemonedeam the late 50's to early 60's 
Mearod. Lt operates in the Task Force environment but each 
Baeoenas a SULte Of Equipment that can function as a self- 
Mm~eerctent System. One of the biggest obstacles of the system 
MmebuLiding networks for the exchange of target information 
memene limited memory capacity of the computers used. The 
system's major components are: 
bee OolOUmeOuUtolcal (A/D) Converters 
liteyeconvemenanaloc sensor data into digital 
m—ornmatton in order to be entered into the computer. 
De COMDUEING EGuipmnent 
Ate eLeonipuEe reinstallation 25 °used because of 
Mmeeimitations on core size and the need to store everything 
im memory (programs, data, and messages). Univac computers 
ame used. 
Se COnMmumreatlons Equipment 
All elements of a Task Force or several Task 
mempees are able to exchange information rapidly over high- 
meeed data links (high level of data integration). 
(eeelsiad Displays 
iiiememeclchecispiay Consoles tor detecting, 
Megeking, identifying, evaluating and assigning weapons for 
mmeercept control. 
Both *hardware and software (bwild in modules) 


have gone through a series of improvements which shortened 





response times by sharply reducing the human role in data 
Mmeecessing and presentation. 
fee Airborne Tactical Data System (ATDS) 

The development of transistorized computers small 
meres tO Lit in airplanes, permitted the development of the 
mio. ts purpose 1S to provide an independent, self con- 
mea detection, identification, tracking and air controlled 
MmeeerTcept capability for the picket aircraft. The system 
Meeerraces with the NTDS. Its sensor is a search radar. 

icmeteteomeeecocinGmand display tuneétions are per- 
formed by a computer which embeds two processors that share 
@e@eeprocram functions, and three cathode ray tube display 
Mocs Lor the crew. The computer processes track data, 
mmemer tor transmission to the NIDS or to be used for the 
ero: Of Interceptors. All computer programs are modularly 
meeert and divided into several classes and subclasses which 
are handled by one or both processors of the computer. 

Paeeotn NVeS and ATDS, as in all equivalent C35 sys- 
mmnmeor this ceneration, the greatest concerns have been: 
hardware reliability, memory size limitations, system inter- 
mens and maintainability [Ref. 4]. The centralized 
Processing concept was popular, since only a major computer 
installation made the operational and maintenance functions 
Seoemomically and technically feasible (specialized personnel, 


meee Darts, etc.). 





MicmeamnmectssUsSed In these systems reflect the 
@rchitecture and technology of the 60's and are difficult to 
be integrated into a larger system. On the other hand, the 
Spstitution of analog with digital computers has increased 
mee performance of these C5 systems. 

To form the database for these systems, data from 
mamy Other systems are utilized. These other systems are 
Mesroned for their own specific purposes and a lot of changes 
had to be made tor data to be interchangeable. 

From the software point of view, data are manipulated 
sequentially since it was assumed that the method of their 
arrival is sequential too [Ref. 5]. 

im eeneral, it can be stated that SAGE, NTDS and 
ATDS systems are basically manual systems, strongly assisted 
Seeecomputers [Ref. 6]. 

me Ocean surveillance Information (OS51S) System 

Tt 1S a world-wide network of facilities and analysts 
mie Provides comprehensive information on everything of 
@mcerest which lies on, over and under the sea. It uses a 
digital network to gather, correlate and disseminate informa- 
mon, Primarily for strategic headquarters commanders. The 
feetem was designed in the late 60's. Contact data classi- 
meemeron and identification is sped up by the use of heuristic 


Mee ria that assign confidence weights to them. 





5. Outlaw Shark 

Hides Gomme O51 system, it 15 still under test 

Sia number of Navy vehicles and selected shore staticns. 

oe Octopus Tracking System 

It is an experimental passive sonar tracking system. 
Meee liacebiigence Tracking and Correlation (ITAC) System 

The system operates within a surveillance data base 
Which maintains separate track files for each sensor that 
Mmertdes data. the system 1S still in the testing phase. 

Pome meen ileiitoma tatemeceneration of C3 systems. 
Meerr detailed architecture is unknown to the author because 
@eethneir classification level. What is known is that they 
meeuse jarge or mini computers as processing devices and 
micributed processing is probably not used in any one of 
them. As for the software, all information is covered under 
Meemeetassiiications "SECRET" or ''CONFIDENTIAL". 

peeeeneecis Combat System (ACS) 

LeotadesepniSmicated antimissile and antiair C3 
feetem which is being installed onboard several ships ot the 
Mmm avy. the system in its present version contains 15 
AN/UYK-7 and 24 AN/UYK-20 mini computers. These computers 
mammoperate as cooperating independent units or in groups 
Sup to 4 AN/UYK-7 DEOecessOrs i) a MULtiIprocessor svstem. 
Each computer system is dedicated to a major function such 
memepcrocessing sensor information, controlling the radar, or 


GooOrdinating the weapons systems. The total hardware cost 





of these computers is about $5,000,000. Timely control of 
Sameeeois Ship's missile fire-power during a multi-axis sur- 
Mease attack does not always leave room for positive human 
control [Ref. 7]. Therefore, Aegis has a pre-selected oper- 
mene mode in which the system itself makes the tactical 
memmston to engage, based on given threat criteria. 

9. Navy Command and Control System (NCCS) 

fo mowuOesemeCOnmederation of relatively autonomous 
memmand and control nodes. Its development was started in 
M@emmia-/0s and it is scheduled to perform as a response 
Meret lexible system subordinating the goals of individual 
Components to those of a larger organization (nationwide). 
Mmeactempts to take full advantage of sophisticated systems 
meet already exist within the U.S. Navy command structure. 
mmeenodes of the system correspond to command posts ashore 
Meer Oat. the new nodes differ from those they are replac- 
meepcimarily in terms ot their processing capacity and the 
Meee and Clarity of their data presentations. The system 
meet!) under development. 

Peercomappacemesthae the UlSs Navy 1S still using 
SueeeercsS that reflect the architecture and the technology 
@eepene 00's which are difficult to use as components in 
memoer Systems. The inter-connections between the subsystems 
Meemachnieved by ad hoc cabling between these computers which 
Meee snare information. On the other hand, automated naval 


memes DecOming a reality despite problems of reliability 
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pmeeertriciency that still appear from time to time. Auto- 
mation has become more and more routine for military tasks, 
mea reliability has improved as operators and users accustom 
themselves to the new systems. 

As expressed in Chapter 9 of [Ref. 7], future C3 
systems will take advantage of Large Scale Integration (LSI), 
meeercomputer systems (instead of central large computers) 
m@eaeprocessing distribution architectures. Future systems 
Mme also be potentially less expensive in hardware costs 


mam the existing ones. 


meee vloltRIBUTED MICROCOMPUTER SYSTEMS (REVIEW) 

Maeceneral, military Command, Control and Communications 
systems of today fall in the category of large-scale distrib- 
uted, event driven systems (from the operational point of 
meee. the problem of C53 system design is one of optimizing, 
Mea System's wide basis, the aggregation of data coming 
mom ceographically distributed sensors and decision makers 
Beogect to limits on communications and computation [Ref. 
42]. Since the various decision makers (users) have disparate 
meeOtination needs and practical considerations make it im- 
MeeotDle to supply the global information set to each user, 
the desirable architecture is one that includes sensor, 
PmeeeesSsor and communications resources that provide each 
MeeeeeyuSst the information needed at just the right time. 

miere does not yet €x1isSt a unique definition for a 


distributed system. However, viewing the centralized system 
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Semeetunctions are Controlled by a central computer) on one 
hand, and the decentralized system on the other (functions are 
mercormed by individual processors with no coordination), 
Semetributed systems can be placed somewhere in between. In 
Gther words, they can be defined as decentralized systems 
mmere process coordination can be applied. Their main 
M@maracteristics are: 

(eee odular and extensible architecture. 

Meeearbitrary number of system and user processes. 

oe Gommunication 1s by message passing or shared memory. 


Meeeiiere E€Xists a system control supporting interprocess 
cooperation and runtime management. 


>. Interprocess messages have non-zero, variable and 
Soiectimes UnpIreadrctable delays. 


Pom teadtions where the implementation of distributed 
eysocems 1S recommended are these in which there already 
Mmeemes a ScOgraphical dispersion. In this case the distrib- 
Mmed Systems allow for fast exchange of data among the nodes, 
mmeancing of processing load, increased system survivability 
Meemereat tlexibility in computation. 

Sueeonetullysdesiened distributed svstem reflects an 
mest failure proof processing/data-storing potential, com- 
Dining most of the advantages of centralized and decentralized 
Systems. 

Giese OGearest concern in distributed systems involves 
memmiuinications. *odern hardware/software state-of-the-art 


has made it possible to overcome most of the previously 





existing communications obstacles. Much research is done 
Meeay towards the improvement of the performance of distributed 
Meseems; however, many problems, including the problem of 
m@emtralized or decentralized controls, remain unresolved. 

There are various kinds of networking architectures 


“” 


meen can be used in distributed systems. Figure I-2 shows 


RING STAR FOREYRCONNECTED 


the most common ones. 
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meine §-2. “Examples of Connection Topologies 
for Multipath Networks. 





No working distributed C3 system is currently in opera- 
tion. However, there exist some banking, airline reservation 
ema computer network systems (ARPANET, DECNET, etc.) which 
mee distributed. Some more are currently going through their 
experimental phase and others are under development. The 
above facts necessitate a more or less theoretical ora 
MemGistic approach to the problem of finding the most appro- 
Memate network architecture for a C3 system. 

In general, distributed network architectures can be 
divided into local and long-haul ones. Because of the recent 
advances in fiber-optic technology, it is likelv that some 
local network architectures can be used in systems where 
the nodes are dispersed in wide areas (several thousands of 
Sduare iles). 

Mien tactors which are considered in choosing one of the 
apove architectures are performance, communications and data 
meester costs, communications delay, expandibility and file 
availability. 

Performance can be further analyzted into data throughput 
Bemeeme network and response time. It maybe is the most 
important consideration in the design of real-time svstems. 
From the above network architectures, the one that offers 
the higher throughput and fastest responsiveness, is the 
fully connected one since each one of the nodes is directly 
memm@ected to all the others. Second to the fully connected, 
the ring and hypercube architectures have good performance 


Sem@etercristics. the rest of the architectures are inferior. 
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eomstdering the Communications cost for the "star", 
Mamio =. completely connected", “tree, and the "hypercube" 
MeeworkS, it appears that the ring network is more economical 
maeeerms Of communications lines and interface units cost 
Meets. 44, 45]. 

In terms of data storage cost the differences between 
mmeror the networks shown in Figure I[-2 are not significant. 
The star topology seems to be more convenient and economical 
mena simple duplication of data storage is chosen. 

Communications delay varies a lot between these archi- 
tectures. A fully connected network minimizes delays. The 
meemor fiber Optics can reduce communications delays since 
mie velocity of data transmission is practically equal to 
mmemspeed Of light. The other aspect of communications delay 
is how long should some data have to wait in a queue to 
S@ececd in accessing a (shared) communications means (e.g. 
pus) . 

Miomwrine Metwork 1S much Superior to all the others in 
@erms Of expandibility since very few changes are required 
to be made (in software and in the hardware) whenever a new 
mode is added to the network. 

The file availability in the star network architecture 
1s the worst because of the long queues that can be formed 
Maethe ports of a central global database (which is normally 


hosted at the central node of the network). 





Meee bOseD C5 SYSTEM'S CONCEPTUAL MODEL 

The Command, Control and Communications (C3) system which 
is described in this thesis has the following general 
@earacteristics: 

Meee ifere eCxistS a geographical ocean area of approxi- 
mately 400,000 square Km, which has a number of islands and 
Meets Spread within its limits and is constantly under 
Surveillance by a number of fixed radars. 

fe Command and Control activities are distributed among 
meur oubarea Commands, each one of which controls an almost 
equal size subarea. 

meen ll Stibarea control centers are tied together on a 
Mmmmeni puted fiber-optic ring network permitting the full or 
Meeetal! integration of the tactical information handled in 
the local subarea environments. 

#. In every subarea there exists a local radar surveil- 
lance network. Data sensed by these radars are transmitted 
Meeecommon physical site, where a complex of processors is 
Meee cOr the correlation of target data. 

Dvir red m iterarciy Of SOTtTware modules E€X1sts 
MimevervY stibarea processing site. These modules serve a 
Seamdard process package and update a local database holding 
Mme chat have to do with the subarea tactical environment 
only. 

mm SlObal database (two Or more copies) exists in 


Semor mOre aréa Sites. This database includes data concerning 


29 





Mmeeeindividual subaréas as well as historical and "library" 
Gata. 

7. Through special message passing it is possible that 
Memcoordination for two or more nodes be exercised bv one 
@emtnem. this becomes necessary whenever the geographical 
Peerent Of the operation in progress exceeds the limits of an 
individual Subarea or when a Subarea Command is unable to 


Peeercise its C3 functions (failure). 
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Figure [-3. Inter-Node Network 
and Subarea Network 
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Bee varzety Of farlure tolerance mechanisms (hardware 
and software) have been designed into the proposed svstem. 
imese are the duplication of the fiber-optic ring cable, the 
existence of alternate sensor/weapons systems connections to 
Mener subarea nodes, the duplication of the global database, 
Smee lOad Sharing mechanisms between the processors of each 
Seeecrcomputer node, etc. All of them contribute to reducing 
meemeoossibility of an occurrence of a fatal failure in the 
System. 

mreewre (loo G1ves an illustration of the system's archi- 


meeeure in general. 


Bee PHESIS ORGANIZATION 

mre tnesis 1S composed of six chapters. 

wellewing the introduction, Chapter II discusses the 
Mmeeartecture of the conceptual model of the C3 system. A 
memeem S OVETrVieW 1S given presenting the organization of 
the distributed internode network, the structure of the multi- 
mempucer nodes and the fiber-optic ring interface network. 
memere detailed description of sensor interconnection to 
the network (through the computational nodes) is given. The 
Meoeription of the architecture of the multicomputer nodes 
Mmemene fiber-optic ring interface are given in the last part 
Seeehis chapter. 

Miapcer fil deals with the Cs system's conceptual data 


Meewiization {for the surveillance portion only. It includes 





mmemraentiftication of the conceptual data and their rela- 
Mmionships, the description of the storage model and the 
meeanization of the “'global"’ and “local” databases as well as 
the mechanisms used for information sharing among them. The 
meow Of data in the network and the mechanisms supporting 
Meme tolerance for the cases of failed network components 
meceocparately examined. 

Mraocer IV 1S dedicated to the organization of data and 
MieecesseS Within the individual multicomputer nodes of the 
Meework (Subarea level). This organization covers both the 
MeeeiGessing and operational requirements. It describes how 
Muumecoari-to-report, report-to-track and track-to-track 
memerelation problems are handled. Track identification and 
Mme xisting means for the human interface with the system 
Mmemmperesented in separate sections. Finally the fault-tolerance 
memeene multicomputer node is discussed. 

Mimocnapter V a nertormance prediction and evaluation is 
attempted. Possible bottlenecks in system's operation are 
mdentified and the side effects which may be caused by ex- 
Memding it are pointed out. In the last section of this 
m@epcer a comparison of this conceptual model system to 
Seeeoting C3/surveillance ones is done. 

Mme final chapter is dedicated to conclusions on the 
meee Of the research performed during the development of 
this thesis and recommendations for further work are expressed 


Memete lation to the goals set in Chapter I. 


OA 
{J 





Peapengix A Ineludes zpllustrations of the conceptual 


Gata structures and their relationships. 
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A. OVERVIEW 

This chapter is dedicated to the description of the 
mm@enrtecture of the conceptual model of the Command, Control 
and Communications (C3) system. This model system uses as a 
Maysical background a geographical area covering ocean sur- 
Pace Of approximately 400,000 sq. Km. The area includes a 
number of islands spread almost equidensely. From the com- 
mapa OOint Of view, this area 1S partitioned into four 
emeareas (Si to $4). Each of these subareas has a physical, 
meeea COMmand post from where the C5 functions for the sub- 
Meeaeare exercised. A number of sensors and weapons systems 
Meet) fixed} exists within the limits of each subarea. Area 
topology and subarea relative arrangement is shown in Figure 
ime) 

Real-time performance is another background consideration 
Meeeciis as for most of the C35 systems. The speed and de- 
Memictiveness of modern weapons systems do not permit delays, 
Semere decision-makers organize their subordinates and get in 
Memenmewith the proper superiors. To affect the outcome of 
mame peration, "real-time'’ command decisions must correspond 
Memene rapidly developing conflict situation. The command 
and control "nodes" (subarea command posts) that support key 


decision-makers must maintain efficient and, when necessary, 
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secure communications with other nodes in the chain of com- 
mand. They must organize and access a large amount of data 
on the operating forces and their environment (sensors/Weapons) , 


Peowrcing commanders with concise, real-time information on 


Meh «to act. 


Subarga fl 


Subarga #4 
Subagea #2 
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1. Network Organization 

The Tour subarea Command posts constitute the nodes 
Meeeae taxed, double ring, distributed network. The physical 
mromnel!s used for internode message passing are cables of 
fiber-optic material which for almost all of its length is 
Meaecd Under water. One of the physical channels of the 
meme Ting 1S Called “'primary'" and 1s the message traffic 
merrier under normal network operation. The other channel 
@epeatled "standby" and is used whenever either the primary 
meme] Or a node fails. Primary and standby channels follow 
mort terent path from node to node for physical security 
Mmeasons. The direction of internode message flow 1s uni- 
@erectional under normal network operation. 

Each one of the nodes has its own, almost equal, 
Megecssing power (hardware and software) so as to exercise 
mmeeo tumctions. A great number (50 to 50) of Single Board 
mememters (SBC) of equal capabilities make up the workshop 
Meeamror the execution of a family of processes accomplish- 
Mmeecne C5 functions. Each node has its own local memory 
meeemenolds all data necessary for the conduct of the C3 
functions within the host subarea. Local memory is stored 
Mmmemard disks and 1s shared among the various processes at 
Bieemulticomputer node level. 

iietme metwork there also exists a so called Global 
Data Base (GDB) which is the internode shared memory. Two 


mepmes Of the GDB exist. They are hosted in the physical 
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mistallations of every second multicomputer node. Each of 

[mien Gbb copies iS directly connected to the ring network and 
has its own computer based Data Base Management System (DBMS) 
[Refs. 8,9]. These DBMSs can be viewed as two extra nodes 
connected to the network. One of the subarea nodes acts as 
meeorimary node’ at any given time. This node is the one 
Meeeeectic SeCnlOr commander, responsible for C3 in the whole 
Meereeeovered by the system, happens to be (he can be in any 
one of the subarea command posts since they all have the 

Same Structure and potential). The internode network arrange- 


Meets Shown in Figure II-2 below (see also Ref. 10: p. 24). 
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Message passing between the nodes occurs whenever 
M@eonrdination of C5 functions in two or more subareas is 
required, whenever the GDB is accessed or whenever messages 
@emectning the operation of the network itself are exchanged 
meariures, load balancing, etc.). 

2. Sensors/Weapons Systems 

The C3 system has both active and passive sensors. 
These sensors provide the means by which "reports" are sensed 
@eemeced into the system. They are radars, electromagnetic 
Memeosion detectors, underwater sonics, and optical devices. 

Loom Orletwsm response Functions, the system con- 
MrOls anti-air (AA), anti-submarine (AS) as well as anti- 
surface (ASu) weapons and electronic/acoustical countermeasures. 

Each one of the above sensors is directly connected 
mora node of the network which covers the C3 needs of the 
Mmearea the sensor is in. This way, four local networks of 
SemsoOrs and weapons systems are formed (one per subarea). 
Mmmeaddition to these direct connections for each sensor/ 
Semmeons System, there exists a secondary connection to another 
Mees the closest). The secondary connections may be acti- 
Mumeewienever the "parent" node fails. Figure [I-53 illus- 
metres Now these connections are conceptualized. 

fee Muiticomputer Nodes 

Leereompuleet complex 15 Dhysicaliy ftocated in 

m_emyesubarea command post. Thirty to fifty SBCs are inter- 


Memmected through a common bus. The compiex has also a 
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Figure II-3. Connection of Sensors/Weapons 
to the Network. 

Shared memory complex and various I/O units. The multi- 
Mmeeessor architecture has the characteristics of a time 
Shared/common bus, shared memorv. This architecture is 
Meecd On the connection of all processing, memory and I[/0 
Mmees cO a Shared bus. Contention resolving for the use 
Mememe DUS Dy the above units is fulfilled by a first-in 
first-out (FIFO) queue scheme. The most serious limitations 
Of this organization are its reliability and the interfer- 
ence between units requesting the bus [Ref. 10: pp. 25-26]. 

MomGeciiece  GONtentlon Of the variousS processors for 


the bus, private memory (RAM) and private I/O are used for 


Miemcrcatest possible extent. Another feature of this 
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Meetication 15 the duplication of the bus, so a failure of 
mes common path will not cause complete system failure. 
iimeuse of the bus is limited to cross talk between processor 
moemplexes, shared mémory accesses and I/O to the ring. 

Mmeeore J)-4 illustrates the internal architecture of the 


mmeciprocessor node. 
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Seer iber-Optic Ring Interface Network 
Mieebate Of data transmission through the fiber-optic 
communications channel is l0Mbits/sec, which is the maximum 
Mmmemrcal rate at which the interface units of the individual 
Medes Can Operate (technology of today imposes this limit). 
Mime Ky tiber-optic cable configuration is used. This 


Meper surfers less than ldb/klm signal strength loss [Ref. 


40) 





16]. Repeaters are placed approximately every 20 Kms [Ref. 
Mmieieand are powered through electricity cables running paral- 
meee to the fiber-optic cable (inside the same coating). A 
detailed description of the technical parameters of the 
Mmoer-Optic channel and the interface units used in the nodes 
MummeweeesS 1, 1S given in Section D of this chapter. 

ihe wadvantdegesmoftered byethe wse of commercially 
@merable fiber-optics in communications channels over the 
Beemsting coaxial and copper ones are: 


Meee otlity tO provide extremely high data rates over 
mene distances. 


Mummeower ©COSst Of Cable per kilometer (including repeater/ 
amplifier cost). This cost is presently $0.046 per 
fiber meter (minimum) [Ref. 17]. 


9) 


d. Immunity to electrical noise, shocks and to water. 


c. Extremely low bit error rate (less than 10 


Semmbow cross-talk between adjacent cables. 


Mercola rance to temperature changes (from -12° C up to 
150° C). However, in underwater installations temper- 


~ 


eeure Varies only between 3° C and 20° C [Ref. 18]. 


gQ 


Becht weitght, low volume. 
Meeeitoh resistance to corrosion. 


m™ Efforts to intercept the channel are immediately 
metectabple. 


DiiemdbOuemeiacactcristues make the use of fiber-optic 
Mees tavOorable for use in the internode ring network as 
communications channel because of the real-time/security/ 


reliability requirements of the C3 system. 





Pij@=ogtne Semlain GliSadvantages are the nonexistence 
Mepctandards (affecting system's cost and parts availability), 
mec 1OW resistance to radiation damage, and the difficulty 
to make new connections of nodes on the cable (splicing the 
mepre Causes Substantial strength losses). Specifically for 
the radiation damage, long term/low dose or high dose irrad- 
meewen 15 Causing luminescence followed by attenuation, 
miercased dispersion and mechanical damage. These effects 
mae Cither temporary or permanent depending upon the fiber 
Material (commercially available glass fibers are more sus- 
@epetole, while germanium doped fused silica fibers appear 
Membe the most radiation resistant [Refs. 11 and 14]. This 
Meena disadvantage of fibers 1s reduced by the use of under- 


water cable installations [Ref. 11]. 


Pee SENSORS 

Mime sensors of the Command and Control system are perhaps 
mememost fundamental elements. In order that svstem's oper- 
Mmememepe triggered, one of the sensors has to be stimulated. 

Pyeeviewing the so called Rona's Canonical general model 
mea COmmand and Control svstem (Figure II-5), it becomes 
Obvious that the I[/0 ports through which it communicates 
with the environment are the sensors (stimulus set) and the 
weapons systems (effect set). 

Pamnce the weapons systems are less standardized, from 


meer Operational aspect, it would be unrealistic to include 
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meeeiied description of their interconnection to the C3 
System. On the other hand, sensor's interconnection to the 
meewOrk will be discussed in detail. 

Eemsors Can be considered as sources of information. 
Gemever, sensors which are used exclusively for weapon con- 
trol will not be considered in this section. Sensors can be 
categorized into the following types [Ref. 12]: 


a. Continuous-valued data sensors: These are radars, 


Pemanhs |bOta passive and active) and other tracking 
@evices. 


Pee biscrete-valued data sensors: In this category, 


mice vilsiial debeccion and electromagnetic emission 
MieotmecOClOn sensors Can be included. Special 
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identification of friend or foe (IFF) equipment is 
also a discrete-valued data sensor. 


Most of the sensors work in a periodic fashion. This 
Meerod iS Called “scan" and it denotes the time it takes to 
Mmeeoit the same point in their search covered space. For 
Mmicance, in the case of a radar, if it takes 6 seconds for 
Meeeantenna to pass twice from a point on bearing ‘"'X"', its 
meeeroa Will be 6 seconds. The operation of the nonscanning 
Memeors (€.¢. nondirectional hydrophones) can be referred to 
meeescCan period of a scanning sensor. This way, if an event 
Mmemsensed by a nonscanning sensor at time T+tAT (in reference 
Meme SCan period of a scanning sensor), it 1s said that 
@ereoccurred during scan period Trl. 

Megescase becomes more complicated when there exist mul- 
Gore SCanning sensors with unequal scan periods where a 
Meewot transformations have to be made. This added overhead 
fem s down system's operation. 

ime oubarea Physical Sensor Coverage 

In each one of the subareas, the whole surface and 
Mae Corresponding subsurface/air volume 1s covered by every 
Meemeor che sensor systems applicable. For instance, a surface 
Seeeair radar network should not leave any gaps (also for 
Mmeammopnone, ESM, optical, etc. networks). In Figure I[-6 
mmeeorcal Subarea conceptual radar network is shown. 

Soperdorinowears Gadar network, the following char- 
MeeeristicsS Can be observed. These also constitute the 


design requirements for the network. 
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Pita Ons oUbarca Radar Network Coverage. 


be does not leave coverage gaps. 


Be uevidesedt sw coaSt twOe cones Of detection in terms 
Sece pth Of defense (from either direction). 


Pememuacam detection See@tOrs are overiapping over the 
mame region (at most three overlapping radar sectors). 


Pnidividual radar maximum detection ranges may differ. 
PmeOMmMOmeecaGrtestan Coordinate System exists, which 


Seen s ene wmole Gs adrea. In Figure 11-6 only a 
poctvemmot the Coordinate svstem is shown. 





*. Another requirement, which 1S set in order to facili- 
tate the report correlation process, is for all radars 


of a subarea to have the same scan period. Chapter 
Me@cCetomImegetme reasoning Oot this decision in greater 
metal. 

me. oensor Interconnection to the Network 


Next to each sensor (e.g. radar installation) there 
meses a local video monitor site. In addition, all the 
meeeons are directly (point-to-point) connected to the multi- 
/agees>Or nodes. These connections are through special 
interface I/O modules located at the same site. The main 
function of the interface modules is to convert the analog 
merormation coming from the individual sensors into digital 
meemals. they also perform other conversions, such as they 
Memyert reports expressed in polar coordinates into cartesian 
(global grid) ones. 

PeeiOuonme le meaDline (omechie Sensors to the multi- 
Drocessor nodes does not need to be of any special material, 
Mae use of fiber-optics would reduce both the data contamina- 
tion and the communications delay. 

Beasors abe Sited into fixed physical locations (land 
or seabed). Some of them are mobile (on vehicles) and can 
memmoved to preselected alternate locations. These alternate 
locations are close to the normal ones so Bee Gonen they are 
used the sensors/weapons coverage is not atfected. The 
Meerdinates of these locations are known to the interface 
modules so that the conversion cf the report parameters into 


the common cartesian grid is performed locally. 


+6 






Peo cnetountaleanegwalternate Pocations, cabling and 
power supplies already exist. The reason alternate locations 
have been introduced is physical security of the sensors 
murine tension or wartime periods. 

Another provisien which increases the survivability 
meetie System is the connection of all sensors, as well as 
weapons systems to a second multiprocessor node. This way, 
@eewr Control can be switched to this take-over node when- 
mameecitiner the node that mormally controls them fails or 
membecomes Overloaded. This reduces the possibility of gap 
meemirrences On the surveillance coverage of the C5 system. 
meee Fl-/ illustrates a typical sensor's connection to the 
network. 

LeOeeeom moc e@Gcmmcawima a sensor Site, in order to 
Semeransmitted to a multiprocessor node's I/O module, go 
morough the modules of the interface unit. 

fiticmece Gade ronmor tmiS tniteriace unit 1s controlled 
@eemeesoincle board computer (SBC). This computer has a copy 
Seeeme ClObal clock that is synchronized periodically by the 
meeerOol module of the multiprocessor node the sensor is 
Meeached to. 

a. Analog to Digital (A/D) Converter 


Pmootventsetule simaloo report sional as it comes 


meemeche Sensor into digital (bit string of a fixed length). 


a 
| 





to alternate 
node 


to alternate 
node 


Oocation 





CONNECTIO 
BOX 








SWITCHBOX 


A/®2 





POLAR TO CARTESIAY 


SCAN REPORT 





BURL ER 


Peco 7 weocnsoOr Connection to Network. 


Deer Olar Go Cartesian 
(ie omittterrakes aS ImpuUtS the digitized reports 
ema the digitally expressed coordinates of the detection 


Sensor's location (normal or alternate) and converts them 


Nn 


into cartesian in reference to the global coordinate system. 
¢. Scan Report Buffer 
All report coordinates are loaded into a buffer 


atter the global time component is added to them, in a sequen- 


tial fashion. The global clock of the system causes the 
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@emiomission of the contents of this buffer to the multi- 
fmmoecessoOr node every "T'’ seconds, where "T' is the duration 


Si a2 scan period of the sensor. 


fe MULTICOMPUTER NODES 

Emery one or the multiprocessor nodes has its own comput- 
Meee and data storage potential. In this way, it is able to 
Meritt? ali C3 functions within the subarea it serves. Node 
Meoependence is achieved through the distribution of the 
mmocesses necessary for data manipulation. Since any one of 
@eeemuiltiprocessor nodes may be called to take over the con- 
meemeor sensors lying in its neighboring subarea(s)}), processes 
meee nandiing data of all kinds of sensors/weapons systems 
are distributed there (even if their host subarea does not 
Memeain these sensors). 

Mimeaci One Of the multiprocessor nodes there exists a 
Meee COMpPlex which controls the operation of the other 
feemre complexes and also synchronizes the node's operation 
Meee che other nodes on the network. 

Each sensor/weapon system's group has its own dedicated 
meee COMplex. All interfacing and data association func- 
MeemoetOr the group is performed within this module complex. 
Me@a@rtional module complexes are dedicated to the cross- 
Correlation of data coming from more than one sensor/weapons 


Meeeem Ss module complexes (e.g. radar/sonar data correlation). 
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Pescomecallea snared local memory hoids all information on 
enemy, friendly and neutral activity within the subarea, 
Mmitceintormation of global concern to the system. 

Gvenorrancement Of the module groups of a multiprocessor 


mee iS illustrated in Fissure 
RADAR COMPLEX SONAR COMPLEX ESM ope eae re 


il i L ia | 1/0 


[7O 





CONTROL COMPLEX RADAR/ESM RADAR/SONAR SHARED 
CORRELATION CORRELATION MEMORY 


Mmeere T1-8. Multiprocessor Module Group Arrangement. 

One of the I/O modules of the node is used for internode 
Semmmnication (fiber-optic interface) and the other to 
interface with the users in the node environment (consoles, 
mmeecnes, displays, etc.). 

Mme bus which links all the module complexes is a paral- 


lel 16 bit one. 






I~ Single Board Computers (SBC) 

Peoueteevanicnuy, Ot commercially available SBCs can 
Memused as processors to perform the functions of the modules 
of the multiprocessor node's complex. An example is Intel's 
iSBC 86/12, which is low priced ($2000.00 approximately) and 
offers a flexible architecture. These features make it a 
very attractive choice for use in the modules of the C3 
system. 

The iSBC 86/12A is a complete computer system imple- 
Mented on a single printed circuit board. It has resident 
a CPU, read/write memory, read only memory, I/O ports and 
drivers, serial communications interface, interval timer, 
Meeeerrupt controller, and bus control logic and drivers. 
Mupmmectitral processor for the system is the 8086A 16 bit 
Meeewoprocessor (made by Intel). 

These iSBCs can be connected to a common bus in great 
mamoers {10 to 20). They all have their private memory (64k 
Oe l6 bit words read/write), while they can access a shared 
meomememory ot 1M connected to the shared bus. Various com- 
Dinations of sharing parts or the whole of this memory can 
be achieved. 

eee ovstem's Bus 

Within each one of the sensor/weapons svtem's mocule 

feemo a Number of i15BCs is connected to a parallel bus which 


has an attached shared memorv unit. 





As an example, the "Radar Network's Module Group" 


meets 111 Figure I[1-9. 


Radar #1 Radar #k 


secondary bus 


=e 





MUDULE GROUP BUS 


Pict wit wen addarrt Moan1e Complex - 


Evcuyemodule oroup 1S Connected through a common 
Semmeeswitch'' to the parallel multiprocessor node's bus. 
fees switch regulates the I/O traffic to the bus and switches 
mamene Standby bus whenever the primary fails (receiving 
mieteructions trom a Scheduler module). 

For each radar for the subarea and for the radars 
mmmpede neighboring subareas which are alternatively controlled 
Peepene multiprocessor node, there exists a SBC. It receives 


Mmmm cei1tized signal as it comes from the interface unit 





memeuehn the fiber-optic cable. To switch from the primary 
Mmemcme alternative sensor site line, it has a single switch- 
ing mechanism which selects one of two existing I/O ports. 
eet CONSists of radar contacts (report/time records) as 
Meemeere described in Section "B'' of this chapter. Their 
met tO the processor module (P) are records representing 
meer CcOMntact reports (cartesian coordinates and real time 
in hours, minutes and seconds). 

iiemprecesson>s (P)eware used to execute certain cor- 
Pelation processes. These processors are iSBCs 80/86. 

Since there is always a possibility that a certain 
maar’ s sector is overloaded with contacts (scan report buffer 
Mmemeerow), there €xistS a mechanism to route excessive reports 
memo Standby processor. 

iiemiilOGadinoeor the Scan report burtiers of all the 
Mmeerrtace Units of the radars is synchronized by the module 
Seepeee  CONtroOlling processor (PC). This processor sends 
meek Synchronization messages to the radar interface units 
Mee tive Scan periods. It also sends to all the iSBCs of 
bie group a special signal every "T'' seconds (Scan period). 
fms Causes them to start a new surveillance cycle (it is 
mmeeaed that all radars of the radar network must have the 
meme) SCan period). 

iiemotaeeae memory OO: the radar module complex hoids 


Mmeeactive track data in record form. Pewalso holds information 


Ui 
Cal 






on the utilization of the bus and the protocols used for 
mmeroes among the different module complexes. 
itcmeOtnOmpnOcessonels a dedicated one. It 15 
meee co Synchronize the operation of the whole complex by 
Meme ine €vent-counts based on the scan period of the radars. 
It also controls the bus switch module (in/out) whenever 
ec 1S information to be routed to another module complex 
feameo the local memory. This module exchanges synchroniza- 
mmomemessaces with the control module complex to harmonize 


meee multiprocessor node's operation. 


fee TBER-OPTIC RING INTERFACE 
ime) Description 

The four subarea multiprocessor nodes and the two 
meres Of the Global Data Base (GDB) are linked on a delay 
Mptertion ring network. The cabling, as it has been stated 
Sempete Dedinning of this chapter, consists of two (distinct 
Memeraphic paths) fiber-optic channels. Under the geographi- 
Mmeecopology of the C3 system's network, these two rings will 
Meeenave an approximate length of 2,000 miles. Point-to- 
meee fiber-optic communications channels are in operation 
Megey over distances close to 1000 miles [Refs. 15 and 16]. 
eee Company project has started laying telephone fiber- 
merce Channels between the United States and Europe (PCM 


eeeotem) [Ref. 18]. 
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The bit rate-distance achievable by the commercially 
available 1.3yp fiber configuration go up to 500M/sec 
[Ref. 14]. The signal loss experienced with the latest ver- 
mons Of this fiber is 0.5 db per Km [Ref. 11]. This permits 
Meeminstallation of repeaters every 20 Kms along the ring 
Meenout substantial signal strength losses. Their bit error 


mire is less than 5 X 1914. 


Bell reports for the PGM system 
a mean time between failures (MTBF) on its cable of 1 million 
mours. 

ie Gompe@site cable desten 1S such that a physical 
MemecetioOn is provided around the fiber-optic cable for both 
bend avoidance and physical damage [Ref. 19]. Inside the 
memes cOating, the power cables that are used for operating 
mieerepeaters, can be hosted as well. Recently, such an 
underwater working installation was reported as having excel- 
meme periormance in Tokuyama bay in Japan between offshore 
petroleum plants [Ref. 20]. Bell for the PCM system specifies 
Meese DOWer supply needs for the repeaters as 4 Watts (15 
Mots). 

Sees oeiiecurace Uilts are required for the concep- 
mremodel system described here (4 for the multiprocessor 
Mees and 2 for the copies of the GDB). Twenty to forty 
interface units have been already used in some fiber-optic 
channel applications. These network interface units have 
Mea@enead pertormances of up to 100 Mbits/sec at great ranges 


(600 Kms). 





ame esOCuNGtmraadhatrem on the different kinds of 
fiber cables have been tested at the Naval Research Labora- 
mermy (NRL) {Ref. 21]. A great variety of cables produced 
MamvariQus Manufacturers were considered. Some test results 


follow. 


Mee (1-525), Polymar Glass Silica 


Radiation Dose 2 10° Rads. = Si 
Loss : eS5e-b7 kim 
Meee (510, -GeO, -P, 0. €eore). Doped Silica 
Radiation Dose : 10° Rads - Si 
Loss : Jaalor com 
Schott (Sid, “GeO, -B, O; -P, ee O-), Doped Silica 
Radiation Dose : i= Rads = S17 
Loss : i -dby Km 


iments Or "e@St, Orl1ces vary from less than $100 to 
Mewethousand dollars per Km. Even if some applications would 
require an investment of $0.046 per fiber meter, the prices 
@m~m~ereiiable militarv systems are much higher. Table II-1 
memes a 900d comparison of cost between metallic and fiber- 
Meere Links satisfying military communications specifications. 

AiemoicmNenmdesemmpodeim tmis thesis proposes the 
meeor a 1.5mm fiber cable with repeaters placed 10 Kms 
apart and a bit rate of 1OMb/sec. 

iieomepemaaliG@ wenaradcteriStics Of the Delay Insertion 
Seemeenetwork used for the model C5 system are described below 


[Ref. 10] and the network unit is illustrated in Figure II-10. 





PNB CES Pi -2 


MelawobtG@ CABLE EINKS VERSUS 
Peek er. TC sbINKS 


Teese. Ug 
ieem Cee 250 Jos oS) > S100) ele: 
Range 8 Km 64 Km 3 Km 64 Km 
Maca Rate 19.6 Mb/s 2.5 Mb/s 19.6 Mb/s 2.5 Mb/s 
Repeaters 19 58 0 7 
maple Cost | $7,000 F070 00 $9,000 $72,000 
Rept. Cost | $15,000 $36,000 0 $5,600 
Hotal Cost S22 00.0 $92,000 $9,000 $77,000 


Byst. Weisht OG ates 8700 Kg 280 Kg LUO aie 


Bee (Co SoaeCmebansiiission takes place in the form of 
Meeks Of data called frames. These frames are first loaded 
Meee the Transmission Shift Register (TSR) and then their 
Mmemcring starts. 

B. A destination address is included in each frame. 

Meee ee GieEnNe Ghanme?! 15 Unidirectional . 

We Loe aie etwonuk (node) interface receiving a 
frame, checks its addressees and if its address is not in- 
meeed, immediately retransSmits it back onto the loop. If 
m@eenode’s address is found, it keeps a copy of the message 
Meneame) and makes this fact known by changing a so called 


Memecpt' bit in the frame's bit string. 





ecw onilomieOr MOde veTL£lies message correctness 
Meemechne fact that it has been received through the accept 
me's state when it comes back to its interface unit (after 
memobeting one full loop). If so, it removes the whole 
message from the channel. 

Maeiie Lhtemuaee UNnLt centains a three position 
Meee (1: FREE TO PASS, 277 RANSMIT, 5:FREE RSR). The mech- 
anism is shown in Figure II-10 [Ref. 10]. One interface 
mmc exists in every node in addition to one unit for each 
Gopy of the Global Data Base (3N/2 units in total for a 
System with "n" nodes. Odd nodes are truncated to the lower 
even digit). 

MiicmmemoEinor a ftrame (in bytes) 1s fixed. Mes- 
Memeemare broken into frames of fixed length in order to be 
meemomitted. The length of the frame equals the length of 
Mmemeneceiver Shift Register (RSR). 

fee Fault Tolerance 

Wiememomcwsc Ghatecases woere faults may occur during 
meee Operation of the network. The most important of them 
meemmentioned below. Others may exist which are not discussed 
here. 

a. Global Data base Breakdown 

MimetscmomcnOr the sGub Coples becomes inoperative, 
Meemmocncr GDB senses its status through a special message. 
Mie cnis Other GDB takes over the processing of all muiti- 


Memeessor nodes requests. When the inoperative GDB becomes 
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—Poaimemo-Oe Loop interface Operation. 


Operational again all changes that have meanwhile been made 
Memeo Other copy are transmitted there. This is taken care 
of by a mechanism which creates a list of all record addresses 
Mmeme mave been accessed after the occurrence of the failure. 

b. Network Interface Breakdown 

ive Stamaby Channel 15 used to close the loop. 

The architecture used is the one proposed in [Ref. 15] 
meme Ti-il). This architecture provides for a switch in 


G@acn one ot the interface units to the network which closes 





Ode #2 GDB 1 Node de_#3 Node #4 GDB 2 








secondary channel 


(a) 


primary channel 


secondary channel 






LOOP 
CONTROLLER 


meoire fi-@), Standby Channel Mechanism. 


the transmission route with the standby channel and forces 
the legs of both the primary and standby channels, which lead 
memeene tailed node, to idle. This, of course, has as a result 
Mae reduction of data transmission speed over the network 
Meeduction of the responsiveness of the system). When the 
SemeertpOoring nodes sense this change by the reception of a 
Special message transmitted just before the failed multi- 
processor node goes silent, immediately take over the control 
of the inoperative subarea's sensors via the alternative 


memerOl jJines. When the site recovers, the control of these 
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maemsors is taken back by their mother node. The local data 
Base is updated as necessary. Closing the gap when two 
consecutive nodes fail, is impossible. 
eae channel Failure 

ic Mec eronocesson node's control module 
Seeee cetects no traffic on the channel for a preestablished 
meme period “tc'' transmits a special message on the primary 
meamme! declaring that it switches to the standby one. Then 
MemotartS sending its traffic. As soon as the other nodes 
Meeerve this special message they also switch to the standby 
channel. 

Geer oystem Partition 

It is the division of the network into two or 
Memperparts. It can happen when a node or both the primary 
Beastie Standby channel are damaged. In this case the system 
Mmeoperate as a group of separate surveillance svstems (the 
Meee ase being when in everv partition a GDB is included). 
T. Minoura and G. Wiederhold [Ref. 45] have introduced the 
Memeo a resilient extended true-copy token for distributed 
Gata bases. This scheme supports system partitioning without 
Mepemeensistency problem. It is based on a precise treatment 
Beerocical data. 

Sileevor tages the breakdown of both GDBs. In 
this case a gap in the sequence of events is suffered by the 


Svstem. 





III. DATA STORAGE AND DATA FLOW BETWEEN 
NOVEM: NEGWORKNOP THE C5 SYSTEM 
A. GENERAL 

Mais chapter refers to the surveillance portion of the 
Mmemceotual model C3 system. Its objectives are to define 
data and data organization, to describe the storage models 
used, and to analyze data flow under both normal and abnormal 
System's operation. 

Maeda can be categorized into two broad groups: (1) dynamic 
Meea {VOlatile) and (2) static data (nonvolatile). A better 
understanding of these categories as they pertain to this 
System can be achieved through the following definitions: 


GLOBAL DATA. All data residing in the Global Data base 
of the surveillance system. 





MONAMIC DATA. Includes data on targets or other entities 
@aat at any one time are within the limits of the sur- 
Mmeeebance area (Or are about to enter) and are part of 
mae Current operational scenario. 

BeBAREA DATA. It is a subset of the dynamic data refer- 
ring to the subarea level (the union of the SUBAREA DATA 
of all subareas equals the dynamic data in the system). 


pee lIG DATA. Is the complement of the set of dynamic 
data in the GDB. 


ive abOve Categorization of data becomes necessary because 
Of their difference in volatility as they are sensed by the 
mewwem. In other words, a surface or air vehicle subject to 
continuous tracking has volatile geolocation elements. On 


meewotner hand, entities which belong to the static data 


Or 





Category, even if they may be moving, do not have high vola- 
mere COmpoMnents and the reports on them received by the 
Seveillance system are occasional or arrive in the form of 
Mmeecliigence summaries (Long Range Maritime Patrol Aircraft, 
Meaemes, etc.) which refer to long time spans. 

Medina SO Calléd track of a given contact, which lies 
Meenin the detection limits of the system's sensors, can be 
Seeablished and associated with a ship/aircraft type, all 
meets known 1S a succession of locations (x, y, Zz coordi- 
Meemeeriples). this necessitates the existence of a special 
tea structure called "TRACK" which includes a sequence of 
ae least three location reports followed by their correspond- 
Mm@oecimes. A track is generally characterized as dynamic 
ata. 

Meets important that the manipulation of dynamic data 
Sue rrormed in real-time, so that the risk of suffering a 
Mepeorase attack is eliminated. The reduction of the amount 
Seeecata considered as dvnamic allows for fast access (since 
M@eewcata can fit into a fast accessed memory arrangement). 

Bemeeme Other hand, greater delays can be followed in 
meeraecving Static data from a much larger storage media 
Without serious effects on the responsiveness of the system. 
Meee will be shown further in this chapter, only a data base 
Mimesatisty the needs of storing the static data of the 
meeecm. ihe tocal data for the subarea is at any time resi- 


Memceat the tocal memory of the multiprocessor nodes. 


oS 





No special software for the manipulation of the data 
elements of the data base is included. It is assumed that 
mmenm a SOttware package already exists. It can be found in 
the open literature [Ref. 15]. The structure of the concep- 
me data {illustrated in Appendix A) allows the implementa- 
tion of such a fast executable software which performs the 
Muememcata base fiunctions (set, delete, update, add, create). 
[mee cnoice 1s left to the implementor and depends on the 


Memeeuage his particular computer facility supports. 


Pee ot ATIC DATA 
mertrc data 1S Characterized as any piece of information 
Mmapen 1S not volatile or has a low volatility. For the con- 
@eeeual Surveillance system of this thesis static information 
m@emides all the types of data listed below. Their structure 
meeaiso found in the illustrations of Appendix A. 
meee Data Categories 
ae type of Platform 
EVel@umEdaar Trepoue 15° cenerated by a particular 
Summer Cype. A type can be aircraft carrier, cruiser, 
Meemeroyer, Submarine or it can be a fighter or transport 
@m@eeart, helicopter, merchant ship (oiler, cargo, passenger), 
menmercial aircraft, etc. 
Dre lass 
icmeraissrot sc OhattoOrm OL type "“X'" 1s important 
memoe KnOWwn as well. The class must also include information 
M@mecue nationality of the type. 
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Ce sycigseng 
All sensors (passive/active) that are known to 
Memst in the real world are included into the knowledge base 
Mempee Surveillance system. Priority 15 given to the sensors 
Meeq bY the armed forces of the nations of primary interest. 
meme SeCNSOT'’ a variety of data structures can exist because 
Mmm@enwchnaracteristics of a radar, for instance, are different 
Muemeecne ones of a sonar. In addition, sensors are related 
Mmoites Or platforms they are most frequently mounted on 
more installations or ships/aircraft). 
d. Weapon 
PMO relemapDOVverSensOr Characteristics also 
apply to all known types of weapons. Information on the 
memeotlities of the weapon is of great importance to the 
@eersion-maker who depends on the surveillance system. 
e. Naval Base (or Port) 
(ilempOcske Hole COUNGEY,, Name, Ships in port, 
Meet ties, defenses, and the operational status of all 
Naval bases in the area of interest {in a broad sense) are 
Meeced in performing geoplot data assoclations. 
Meer tiecid (Or ALTport) 
Povo nrormatron On the airiields helps to 
Mmemeommaine the nature of the air threat (Squadrons, types of 


feeeeratt in each airfield, primary mission(s), etc.) 
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Cee Ore 
It 1s almost impossible to keep all the geoloca- 
Mmeme history of each individual track. By keeping files of 
merical plots in a data base it 15 possible to investigate 
some incidents and analyze scenarios to derive useful infor- 
Meetom at a later time. The information that is included 
Mumemesoe DlOt files is the time period covered, area, unit 
seoplot information (time/position pair groups for each plat- 
meom), and other miscellaneous information. 
Den como eneloo1cal Data 
Paste present and predicted information on the 
meme orological conditions are very useful to the decision- 
maker whenever he is willing to dispatch units and assign 
Msestons. the information inciuded is sea state, wind, cloud 
Memeerace and type, temperatures, humidity, visibility, etc. 
m_eaavarouraphic Data 
(tim oITi Mame coe ene meteorological information. 
Hydrographic and sound propagation data (past, present and 
Meeaicted}) are vital to the conduct of ASW and amphibious 
@eerations. 
ioe ROE 
ijesimeertton, @r the rules of engagement Into 
miemanowledge bank of the surveillance system permits the 
High Command to impose its will at any time by simply relax- 
iitemor restricting the use of weapons or tactics during the 


Various stages of conflict escalation. These restrictions 
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are advisory but the knowledge of the ROEs frees the decision- 
micer trom the uncertainty of the political implications of 
mes actions. 
ken ecoun try 
tio moO ckamemeO KmOow the elements of the mili- 
iory and Military related potential each country of interest 
mee All ships, aircraft types, merchant ship/aircraft 
@ompanies and airfields, airports as well as ports and naval 
mises that belong to countries of interest are included. 
ir Company 
ines entity refers to shipping and airline com- 
@emres. All merchant ships and commercial aircraft of a 
men COuntry are related to a company. A decision-maker 
better judges and evaluates information by having access to 
omen intormation. 
m. Platform 
Pol veronietws any mobile vehiclewwhich carries 
Meeensor Or a weapon. I[t can be a ship, aircraft, submarine 
@eeland vehicle. 
a, flies 
fimeocmanwedestruceure Imecludes the coordinates Of 
Semone of the shore sites known to have a weapon launching 
meeoality or are used as mounts for sensors. 
Se Massile 
iMiiemorcermimnbenalwenaracteristics, the identity 


meemeures (electromagnetic, infrared, optical, acoustical) 
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and the country each one of the known missile types belongs 
@emare considered as vital information. That information is 
to be of immediate reach to the surveillance system because 
Ot the imminent threat a missile may present to the friendly 
merce s. 

me Data Relationships 

iiewi@extuvery important step in the identification 
Meeecne data structures used by the system is the definition 
Meine set of their interrelationships. The optimization of 
data association schemas will have as a result savings in 
Doth storage space and seek time. [It will also simplify the 
transformation of the information into a storage model and 
the formulation of the data base(s). 

Ome Ort the important things in defining these rela- 
tionships is to ailow some room for possible future changes 
meethne data structures (flexibility). For instance, should 
meme xctra component become necessary to be added, some of 
meen relationships may have to be redefined. 
fee otOrage Requirements 

Sete wddtalas a large storase requirement. Its 
meeeme depends on the extent of coverage ot the surveillance 
meee. FOr example, in order to record the military poten- 
meat Or the Soviet Union (types, classes, sensors, weapons 
Meeeeeris, e€tc,), the storage requirements would be in the 
mecion of oe bytes. ihe addition of information on other 


mireries and the inclusion of plot, meteorological, 
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Mmarographic and track information for the surveillance area 
memmeomakhyzed above), increases the storage requirements close 


to 19719 


bytes (once the sensor/weapons systems lists of the 
meemajOr manufacturing countries is inserted to the data 
Meee, the rest of the countries will occupy relatively small 
Space because these same sensors/weapons are used for plat- 
mem constructions in different combinations). The above 
MeaeeestOrage potential is also sufficient for storing extra 
mer Oormation concerning the whole Command and Control system. 

Only a data base organization (supported by a DBMS) 
Mtoe tO permit efficient access to such a large volume of 
data within a reasonable time (relative to the needs of 
military real-time surveillance system). 

This so called global data base (GDB) resides ina 
maeamatre node of the network and has its own interface unit. 
The GDB is made redundant with the creation of a second copy 
Sameem acts as backup and shares the transaction satisfaction 
Meee with 1tS twin sibling. The physical locations of these 
Mummeeaptes Of the GDB are so that they reside in every second 
multiprocessor node. The above architecture offers the 
following advantages: 

peeeeeincreases the througnput on the network since inter 
multiprocessor and processor/data base transactions 
Zane be coins On Simultaneously on different parts of 
the network. 

Mummmeeeadices the duration of a data base transaction (system's 


Hesmemonvenmess) Since Gach one of the GDB copies 
TaismlicomtWwo Multiprocessor nodés requirements. 


eye, 





c. Increases the survivability of the system in case one 
of the GDBs fails. 


geworeeraeentee Paldsis the cost of Z €xtra inter- 
face units to the network (one for each of these FDBs). 

imcwnte hist vce Liat hasebDeecmmeomsidered 15 to dis- 
mmeemte a CODY Of the GDB to every subarea node. This idea 
Meemercjyected, first because of the higher cost involved, but 
emery because in order to refresh the GDB copy of a failed 
mia later recovered node would block its interface unit for 
Seeemsoraerable time, practically prolonging the existence 
Memeecime Cap in the operation of the system. 

icmicimenOonr most OF the=data residing into the GDB 
Mmemstatic and as such they are basically loaded manually or 
momougch interface modules to other information systems. 

MimoncmOmmane  Slnes, where a copy of the GDB 15 
hosted (primary GDB), there exists a so called "GDB Custodian 
Meaty’. this facility consists of a number of people, 
mminals, and a repertoire of applications programs. The 
Meoeecustodian Facility collects information from various 
mummmces, 2S 15 shown in Figure [II-1. This way, the static 
ata Of the GDB is kept updated. its operation is similar 
Memmedat Of an intelligence agencv, where information has 
Meee tiltered, correlated and assigned a "'contidence level". 
eemeence COntidence level of a given information chunk exceeds 
mmereestablished threshold value, the information is used 


mommpdate the GDB. 





OTHER jGOB 
COPY 


C 


Intelligence Syste PROMPT /INTERFAG 


ek 


TERMINAL 


(DJ 785 UNS) 





eecueve 110-1. “GDB Gustodian Facility Operation. 


PemencUre fadteadll necessary components of an infor- 
mrenon Chunk have been included during the GDB update, the 
Mrrerecation programs have been made interactive. Given the 
mepe Of data being updated, a sequence of prompt questions 
mmemoosed to the updating personnel. 

aes PUPOTTty If Satistvine transactions by the GDB 
Menacement System is as follows: 

a. Retrieve transactions from subarea sites. 

me Update transactions from subarea sites. 

mm update transactions to the subarea sites. 

feeeupaate transactions made by the GDB Custodian Facility. 

The above priorities are established to ensure that 
the most urgent work is done first and the system performs 
Seeeeot-ctime. A number of buffers (spoolers) is used to 


Meee ld Waiting transactions before they are introduced to 


the DBMS. 
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Nictieecntdr@ecumaetection TFeport 1S entered to the GDB 
Meare the Custodian Facility (Long Range Maritime Patrol Air- 
meee, intelligence, etc.) the following happens: 


mee it is determined near which subarea(s) the target's 
Dosttion lies. 


meee ine report is routed to this subarea's multiprocessor 
node (to be entered into the local memory). 


m_eeeeseanrch 1S perftogmed gm the GDB based on existing 

relations and all related report information is re- 

Bue od TOsDe Sent suo Ene multiprocessor node concerned. 

iheesane pmecedure 1s folllowed whenever a target is 

Meese detected by the sensor of a subarea and this initial 
memort 1S sent to the GDB. Of course, in this case some 


Seera data are needed in order that the target be identified. 


Mmeoure Iil-2 illustrates the above process. 
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Powe li 2 Newekeport Data in GDB. 





eee Kes pense | limes 

PEcCOeImormsldni zation Of =the data and their relation- 
ships in the data base (relational data base) is estimated 
fnat will permit an average of 50 milliseconds access time. 
This number includes also the communications delay (due to 
m@emlength of the fiber-optic cable) and assumes an average 
/meagitic load on the ring network [{Ref. 10]. 

Based ome onal response time, the tollowins rough 


memeculations can be made to find the throughput of the 


network: 
Sole ei Gansaction Response lime > 50 msec 
hiemeer Of Transactions per Second et Zi0 
(eibpews On ([ransactions per Scan Period : 120/6sec 
Global Data base Update (every 30 scan periods) 
ore 220 = 35000 transactions 


The number of 3,600 GDB transactions that can be 
PemtOrmed per GDB update includes both routine and nonroutine 
Mmeemsactions. Routine transactions are record updates. 
Memroutine transactions take place in the cases of first 
Memections, track initlializations and imminent threat reports. 
iiesaboye throughput is considered as adequate for any prac- 


meee requirements of the proposed C3 system. 


meee DYNAMIC DATA 

feel intOrmation that 1s related to the scenario in 
Meoeress in the surveillance area is called dynamic. Local 
teas is a subset of the dynamic data and refers to an in- 
dividual subarea. Dynamic data is of two types, reference 


Mead and tracks/reports on platforms. 


= = 
= 





Reference data is static data that must be available in 
the local memory of a multiprocessor node so as to enable it 
memcarrying Out its identification and classification functions. 

imack/report data form a separate data structure type 
Mmirch is described later in this section. 

mee Reterence Data 

POmectemuunackuwmilen has been identifieds to belong 
jmeea specific platform, all information about the type, class, 
sensors/weapons systems it 1S equipped with, and its home- 
Mere are included in the reference data set. Meteorological 
and hydrographic data referring to the present and predicted 
Senditions as well as the immediately previous and current 
Meors tor the subarea are also included. The above informa- 
tion is supplemented with data on imminent threat platforms 
Meampeeewnen a specific fire control radar (FCR) is intercepted, 
memoives the indication that an enemy missile is about to be 
Memermened), Finally, the rules of engagement (ROE) in etfect 
memany time constitute part of the reterence data. 

Reference data insure the subarea Commander's inde- 
pendence and make the response of the svstem as a whole more 
meerd. ihe mechanisms which are used for updating the ref- 
erence data set (additions/deletions) of each individual 
Semeerorocessor node have been described in the previous 


section. 





Meee bracks/Reports 
reGiaem 15 a Gata Structure which has at least the 
meblowing components: 
fee lwo Or more positions (x, y coordinates) together with 
femenemec times (two locations only when the positions 
meecmomresult Of ad Visual identification) . 
meee irack number (as in Chapter IV, Section E). 
imadcmeton weno Incluston of the following compo- 
Meeeinto the structure of a track are considered as help£tul 
mumriycrecasing the responsiveness of the surveillance system. 
Mmeumericading derived from consecutive locations. 
ae opeed calculated on the basis of locations and their 
Corresponding times (can be analyzed into three sub- 
PA MOOveMeso wim tne Girectr1Ons Of the principal coordi- 


Mate system's axes). 


fmeotze Of CONtEdCt, aS if 1S sensed by the detecting 
Sensor . 

iagemor taroCt. SUCH aS Cruiser, submarine, helo, 
meee er alrecrart, etc. 


Hh 


Feet the track 1s redated to. 


ga 


iitemudiies sj Lmene components (c) through (¢) are not 
Meeessarily always Known. It becomes clear at this stage 
baat whatever relation is to be established between a track 
meoecne GDB, it must be based on positional data (including 
ime ) . 

Pee OGemls sd Special Case Of dad track. tft includes 
Mmereone positional component and a "'track-no". Depending 
meee type of the detecting sensor, it may or may not in- 


Mupeeetne rest of the components of a track. For reasons 





Masimpitecity, a report iS handled by this system as a track 
eemenuli values assiened to some of its Components. Figure 
Mmer-5 shows the structure of a typical track record as it 
mmpeonceptualized above. An extra field is reserved for 


linking purposes (next). 


Figure III-3. Track Record Structure. 





Size | heading 





A typical relationship of a track is discussed below. 
ROS j= REO: 

Starting from the moment one of the surveillance 
System's sensors locates and starts tracking a given target, 
mae ctOllowing questions demand an answer: 

a. How can the track be associated with a type? 
BD. Where did it come from? 
Memeeiiiat threat does it pose? 


Sows the track related to the general tactical 
Dae cure ¢ 


bmeeuder £O answer hese aquestions it 1s necessary 
Memmeetse Some of the relationships of the previous section 
Memo the relationship between TRACK and PLOT as shown in 


Figure III-4. 





Sev LAO uk S Dat OT 


Piaget "Relacvon, of TRACK to PLOT. 


meee otorage Requirements 

iieeitenGe OL tnessUrvetllanee system described in 
Jers thesis is such that real-time performance is what must 
PewoOr primary consideration. As a consequence of this, data 
must be represented, related and organized in the memory in 
Pmen a way, so to be accessible as fast as possible. 

The data structure the system has to do with more 
meegmentiy is the TRACK (or REPORT). It 1s important to 
Meentifv this entity (especially if moving fast). So, ele- 
ments of the TRACK are used in the formation of an index 
meecne local memory. 

The components (or fields) of a track can be sepa- 
eed Into two broad categories, the "overt" and "covert" 
Mum iie first are the ones directly sensed bv the sensors 
meme System. They are TIME, LOCATION (x, v, z) and SIZE 
@eereturn. All the rest are covert and take assigned values 
Maes Calculated by the mechanisms of the surveillance 


meecem's processing elements. 





Generalizing things a little more, it is almost cer- 
meme that the approximate location of a given TRACK will 
always be known. If the chosen basis for calculating the 
Meeecomponcemt to address the track record is the location of 
mie track {last sensed position), it is implicit that one 
mmmcie two coordinate systems used in operations should be 
emosen. 

iiemetmeeatIn ls omuem Mone sUultable tham=tne polar 
meerainate system for the network wide coordinate system. 

To minimize the average data seek-time and avoid 
meeee deviations from this average, a close to uniform dis- 
Mmeroution of records into the local memory is desirable. 

Through a division of the whole area covered by the 
mmmveillance system into equal size Squares it 1s possible 
Memalstribute the TRACKs according to their location almost 
mertormly. ft must be realized that some squares will be 
Semmes aense during several “time spans" and some others will 
mye dad continuously high density (focal points, such as 
meeamity to ports and airport terminal areas). 

iiemst2e Ore che Mamaceaple Square area in terms of 
track capacity and practical handling, as well as the size 
Meeeene total area which is kept under surveillance by the 
mescem, determine which hashing method will be used. 

Oeepounvelliance Area Size 

Neither of the x, y dimensions ot the surveillance 


Meececexceeds the 1000 N.M. Under the coordinate grid addressed 
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meee every track Can be referred through the triple x, y, 
mermere both x and y range from 000 to 999, and z from 
meeeoo to 100,000 feet for all realistic purposes. 

De lamacednl ce wAnea 

Mimampoderhenmaval)cONntl’ct SCeNarloO Or in a 
Pension period situation (which are the two cases where speed 
mmo great importance) no more than 20 tracks are likely to 
Meeist Within a 10 X 10 square miles area extended vertically 
memene limits defined above. 

The above assumptions make the implementation of 
Metasning function possible, which uses the most significant 
[me digits of the track's x and y coordinates as an index 
memenhe hash table. 

Omer lek cumGack as last location xX=E£iij, y=522, 
mmmo0) 1S expressed as 2], 52. If now these two numbers 
meeecOncatenated so as to form a 4+ digit integer, tney can 
memeasily used as an index to a storage block address. 

Dots oitdcemen: facilitates thestast association 
Buea track lying in adjacent squares (they occupy memory 
/eyeations close to each other in a storage media) and allows 
Meera CONtinuous rearrangement of tracks into blocks as they 
feeeee in the real three-dimensional space. 

Miicemiasierincemon can be implemented in a Pascal- 


mece language. An example is given below. 


Fimet tome 1mvocatlon 


address := hash (x,y); 


Biimet1on declaration 


EMMGHbOMMaSi NN. 1 > read) ingecer ; 
Mace —tmereter (jy I0)-)00 + integer(Y)/10; 
end; 


The total memory capacity requirements for the dynamic 
meapaestOrage 1S estimated to be in the order of 1Mb. This 
data can be stored on RAM memory commercially available today. 

4. Response Times 

The response times that are estimated as achievable 
Meeethe system for the dynamic data are equal to real-time. 
mms is accomplished by the partitioning of the dynamic data 
Meemoy distributing the partition elements into the local 
memories of the multiprocessor nodes. This way, communica- 
meons delays are eliminated tor all practical purposes and 
the overhead to access dynamic data is minimized. An average 
Meea access operation can be completed in less than 1.4 sec 
(access to the bus and memory [/0). This way, within the 6 
Seconds of a scan period, a minimum of 4,500,000 memory 
accesses can be accomplished at the multiprocessor node level. 

Ditommuienr cGxeceas the meceds of the surveillance 
System and leaves room for comfortably using the shared 
mmmery tO Store other information as well (e.g. correlation 
processes and other software modules which are loaded for 
SeeclitiO;n to available SBCs of the complex whenever they are 


invoked). 
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De DATA FLOW 

The data that flows between the different parts of the 
meeeem CONSists of records and special messages. The records 
Mepresent the data entities described in the previous sections 
Meeeceni1s chapter. Special messages are used for system control 
and synchronization. 

Data flow on the internode network makes use of the 
Meeer-Optic ring structure and consists of frames of data 
that also contain address(es) and other network control infor- 
mation. Inside the multiprocessor node, data flow between 
the module groups makes use of a time shared parallel system's 
pus . 

In the following paragraphs the mechanisms used to ensure 
the fast and reliable flow of data are described both, inside 
mae multiprocessor node and for the internode network. 

me Data Flow on the Network 

iio wl irOomlanlonm execaan?e requirements Of the subarea 
Meaes govern the flow of data along the network. This flow 
Mees a clear view of how the system operates. 

Piemilaj/Oreddvancage Of the register insertion ring 
Metwork, used in this architecture in terms of data flow is 
that multiple transactions between nodes can be going on 
Simultaneously. 

In each node, the data before it enters the Transmit 
meet Reoister (TSR) is converted into "frames" that include 


Me@emextra Control bits and the addresses of the originator 


$1 





Memtne trame and its destination. These bits are called the 
Bmetcn'’ and the "accept" bits. They are part of the overhead 
which is used to verify that the transmitted data has been 
meoperiy received by the addressee nodes. The way this is 


done is described in Table III-1 below. 


lsves ios haa 
Ma GhwAN Wm CCBe | Bits 
Rete! Oc pen 6 5:4 


Match ANCES one Meaning 
iat Dat 











0 0 The message was addressed to a node that 
dgesmeonnecwist, me interface unit recognizes 


the message. 





The message was successfully transmitted to 
one or more nodes; at least one interface 
unit recognized the message. 


" No node received the message; however, at 
cco munbomL ace ill: recounized the 
address in the message. 


1 il The message was addressed to nodes in at 
ieace 2 suibaweas. Ae least one interface 
Unit was able to copy it and at least one 
vos Uno le tO Copy It. 





POuMmiteeh wamd. aecepe™ DitS are initialized to 
mo. When the frame they are attached to makesa complete 
Meeewrt On the ring, the RSR of the originator node checks 
Meer Status and the correctness of the bit string compared 
Memmene transmitted one. If the message bit string is found 


Memeo COTTrect, the accept/match bits are examined. In case 
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meeu-i is found, the originator's interface unit removes the 
frame from the network. Otherwise, it retransmits the cor- 
rect message. 
PiVmOcdculMECh@dee Unit MEGCOCNizing ges address in 
Mmerame Changes the accept bit into "1" (after successfully 
copying the carried message). The match bit is changed to 
Mme by a receiving node whenever a successful copy has not 
been achieved. 
a. GDB to the Multiprocessor Node 

The data of the surveillance system which flow 
meom the GDB to a multiprocessor node are records of entities 
Which, either have been requested by the node addressed or 
have been judged as necessary to be sent to the node(s). 
Mims iast Category of transmitted data is a result of the 
Mieertion Of new data (static) into the GDB through the GDB 
Meoeodian Facility and have as a result a change of the 
Sperational scenario. The sequence followed in order to 
Mee dalize such a transmission is illustrated in Figure II[I-5S. 

fice Gobenedes tatelauime SUGCn a transmission 1s 
M@ieeDrimary one (the one that has the GDB Custodian Facility). 

Im satistyine a multiprocessor node's request, 
mae GDB node which as received the request, transmits the 
Mmegmested record to the node (the requestor's address has 
Deen kept in the spooler). This mechanism's operation is 


mmmiserated in Figure [II-6. 
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Pisure III-5. New Data in the GDB. 
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Normally each GDB copy serves the requests of two 
mmrcaprocessor nodes (Figure III-7). In this figure, each 
dot-surrounded box indicates the GDB which collaborates with 


mepeanr Of multiprocessor nodes. 


Se S4s3 seis 
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ee 





PaoWGem ol ir ie Corlaporatineg Nodes. 


Dee cwem.a GDB toa GDB 
Such an information tlow occurs whenever data 
meminserted to the primary GDB through the GDB Custodian 
S@etlitv. All the so inserted information is transmitted 
to the other copy of the GDB independent of its transaction 
Bemany Other multiprocessor node(s). This way, the two 


mes OL the global data base are kept identical. 
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Ca Mmetipmocessor Nodé to the GDB 

The data transmitted from a node to the GDB is 
Seeeseveral kinds. First of all, an initial report of an 
Memect, detected by a sensor of the subarea, is transmitted 
memeene GDB with a maximum delay of 6 seconds. In addition 
memtenis, whenever a track on this object (platform or missile) 
Mas been obtained, it is also transmitted to the GDB. 

The rest of the data flow (node to GDB) consists 
@eecrack record update messages which are sent in the form 
Mec rames. Since that kind of data are, under normal condi- 
t10ns, vital to the subarea Commander, their transmission 
memctne GDB is done every 5 scan periods (rapid transmission 
1S not necessary for that data). In the meanwhile, data 
mien are to be transmitted by a multiprocessor node during 
the next transmission are stored in special transmit buffer 


Memplex. Figure [II-8 illustrates how this mechanism works. 


LOCAL MEMORY 
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| CHANNEL 


mmoure JIl-8. Global Data Base Update with Dynamic Data. 
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d. Among Multiprocessor Nodes 

The data flow between the system's multiprocessor 
nodes consist of dynamic data that refers to tracks which 
Mave motion going from the transmitting subarea to that of 
mmemaddressee(s). The criteria used for initiating such 
i@atsmissions are their vicinity to the boundary line between 
Meee two subareas and their heading. These criteria can be 
altered to include all track data in the subarea whenever 
mien addressee node's subarea Commander is assigned the coor- 
Gination of the operations within the transmitting node's 
and his own subarea. 

These transmissions are done following the same 
transmission intervals with the global data base (GDB) updates 
(every 30 seconds). 

fee Data Flow Inside the “Multiprocessor Node 

eeiatdmelows inside the multiprocessor node through 
memeonnon bus. The ditference from the data flow on the 
Meework 1S that for each individual sensor complex the data 
moaeen tlews in and out of its module group is in terms of 
Mummeneccoras Of the data structure it supports. For instance, 
mae Electronic Support Measures (ESM) module group's complex 
mmmeereceive or transmit only active SENSOR records (radars, 
Meemcdlipment, jammers, etc.) and REPORTs before and after 


memanoculation has been achieved. 





Dies ememomeemdarta, aS ite comes into the multiprocessor 
node's environment, is loaded to the shared memory of each 
@aaividual module group (related data only). 

WitenicVer tiescontrol module sroup gives a synchron:- 
meeron message to the different module groups they send their 
Meme lated data (track or report records) to the shared 
memory, and the sensor combination module complexes so the 
mieormation may be further classified. This does not apply 
memene initial detection reports which are transmitted directly 
@eeene I5R. Data coming from the sensor combination module 
memolexes is loaded into the local memory. In addition it 
Rett tO the transmit buffers of the node's network inter- 
Meeeminit. the processor which 1s attached to the local 
meamery module complex assigns track numbers to the incoming 
Mem reports and returns these track numbers to the originating 
module complex(es). 

Miem@escCriptione ot ene inter module complex data flow 
Memenietted trom this chapter (it is given in Chapter IV). 

Micmimlov OLeddeasin the multiprocessor node environ- 
mene tS Shown in Figure [I[-9. 

Smee in every scan period (6 seconds) data from each 
one of the sensor module complexes flows towards the Local 
Memory, the Multisensor Complex (Radar/ESM complex in Figure 
memo). the 1/0 module to the ring interface unit (initial 
reports only) and the I/O module which serves the human 


Maeetriace tacilitv in the subarea Command post. 


38 





RADAR ESM 


COMPLEX COMP LEX 


[resemnall 


t Ecce ee eeee ie 






CONTROL 


LOCAL RADAR/ESM 


naman Intern 





MEMORY COMPLEX 





Piguimemili=94 Data Flow Insade the 
Mibeeiomecessor Node. 
ines Radanr/EoMspcomplex*outputs data for the Local 
Memory and the Sensor Module complexes, where the derived 
Meeeerete characteristics of each report or track are added 
Mmemeneir records as well as the assigned track number. Just 
Meeeer this complex classifies a track (or report) as hostile, 
muemerecord 1S also routed to the I/O modules. This data 
meow takes place every 6 seconds also. 
iitcmOccimeMenonmy.: transmits GDB update data once every 
Sumesean periods (3 minutes). This transmission is done 


through the I/O module interfacing the ring. 


Pee ATA FLOW IN CASE OF FAILURES 
Mine failures which are considered in this section reter 


meee major components of the distributed surveillance 
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memenOrk., — these failures will be examined from the aspect 
Mmemteneir effect on the flow of data. Namely, the failures 
m@@ace are addressed in the following paragraphs are link 
merce, node failure, interface unit failure and system 
pecuration. 
1. Link Failure 

Nien aglaink conmectine two different nedes on the 
Seemmmel fails, no traffic is further received by the second 
meee {in the direction data normally flows). This second 
meee detects the link failure by lacking any input on the 
menor itS interface unit for ten loop periods. This time 
meecgual to 100 microseconds (which equals the time it takes 
meme a bit to complete ten full loops on a 3,000 km fiber- 
meee Cable under uninterrupted flow conditions). Both the 
Meer ony and the secondary GDBs, every one loop delay period 
Mememit a special bit string to indicate that they are still 
Mmmeive’ On the network (normally one of these bit strings 
[merecelved every 5 microseconds). The detecting node assumes 
@m~ea link failure has occurred prior to it. The control 
module complex of this subarea's multiprocessor node gener- 
Mera Special message. This message is transmitted on the 
Pramary channel and immediately following all data flow orig- 
[meaeine from this node starts being transmitted through the 
Standby channel. 

WMew rest Of the nodes; as soon as they receive this 
m@eelal message {bit string pattern), switch to the standbv 


Soanne | . 
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(ihe wert Ss Mitonocmenme mo, data 1S lost since a copy 
of all frames transmitted by any one of the nodes on the 
network is kept at the originator's transmit buffers until 
/meaean be compared with the returning identical frame. This 
ma, moO data 1s lost since the frames can be retransmitted 
Om the standby channel. 

men the Orlicinaldy primary channel becomes opera- 
Mmeomal again it acts as a standby channel since there is no 
Meeercrence between the two of them. 

meee Node Farlure 

As it has been defined previously, the nodes can be 
@actegorized as GDB nodes and multiprocessor nodes. Each one 
G@e these node categories, even if it has a similar interface 
Memeo the network, serves a different purpose. So a failure 
mea node belonging to one of these categories must be sep- 
arately discussed. However, some reactions of the network 
memmede tatlures of both of these categories are similar. 

a. GDB Node Failure 

fem senOode dnberracemumit has an extra 
Meetanism which produces a characteristic 16 bit string and 
meeiiemitS it on the communications channel once in every ten 
Mememaeclay periods. When this string returns to its origi- 
meeor GDB, a part of it 1S incremented by 1 and immediately 
Mmeemansmitted. Each GDB has its own characteristic bit string 
mememe Status of each one of them can be determined very 


frequently. 
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WiGcrimnoce —NOstineg a copy Of the GDB fails, it 
becomes unable to accept requests from the multiprocessor 
Meees it serves. By being unable to increment its character- 
mere bit string, it allows the node hosting the other GDB 
Mumpmmeoncdetectethe failure. Aftér failure detection, the 
Mmemer copy of the GDB takes over the satisfaction of all 
Metmereaquicsts. As a consequence, the throughput on the chan- 
Met is reduced down to the half of the normal. Still, the 
Mmreom iS ablie £6 Operate, since the number of transactions 
™ less than the capacity of the single GDB. 

PadboaeGiisenecovery 1S handled in steps. For 
mmeeche GDB records that have been updated an address list 
Meeeept and only the last update made to the record is stored 
mime. Addresses and records are kept in parallel arrays of 
@ememeess/DUrfer pairs which are used during the refresh of 
mmememecovered GDB. When the last of these buffers is emptied, 
Memesosace trom the refreshing GDB triggers the reactivation 
Semmene Dit-String incrementing mechanism of the recovered 
mee. From this moment the system restarts its normal opera- 
tion again. 

Micwabove GUBetal Ure = managemenct procedure is 
meecen from the multiprocessor nodes which keep addressing 
their requests to "'the GDB" (one address exists for both GDB 
Meeres, Dut their interface units are smart enough to satisfy 


meemests depending on the requestor). 
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b. Multiprocessor Node Failure 

The failure of a multiprocessor node creates a 
meeacer problem for the surveillance system because all in- 
Mmermation on the activity taking place in the subarea it 
mmeperts 1S denied to the rest of the system. In this case 
meeminterface unit transmits a special message (bit string) 
on the network channel which announces the inoperativeness 
oe the node. 

Negiteciemomoanea S multiprocessor nodes recelying 
mos message immediately activate their switch boxes which 
elose the alternate connections with the sensors normally 
memcemelled by the failed node. This sensor sharing is pre- 
agreed and on a 50/50 basis. ; 

Mimedahemonmto. ener ecxera processing load they 
meee, the set of the local data of the failed node is sent 
to the take-over nodes from the GDB. This, on one hand in- 
M@eeases the traffic on the channel, but on the other reduces 
Beemcomnplexity of processing at the multiprocessor lievel 
Memere €Xists reference data). 

The reverse process (node recovery) is simpler 
memec ali the necessary local data, as well as the control 
Sethe sensors, are passed back in a stepwise fashion. 
fee NOdew interface Failure 

Miaitoncasecemenca same aS im the failed node problem 


Mmamaling sequence takes place as for the control of the 


sensors. The difference lies in the utilization of the 
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momminmtcations Channel. Since the interface unit is inoper- 
menvye, the tratific cannot go through. So the ring loop 
moses by the special arrangement shown in Figure [I-11 with 
the utilization of the standby channel. In this case a 
meeacter communications delay is exercised on all internode 
meemsactions because of the cable length increase. This is 
mie minimum price which can be paid. 
MmNeCWOrK Saturation 

NervOrk ssamuratlon occurs whenever a GDB refresh takes 
Pamace Or when a node which had failed recovers and its SUBAREA 
Mein is updated. In these cases the data flow on the channel 
increases substantially and the network becomes saturated. 
Memmerroid this kind of saturation, a so called "SLOW/FAST 
meetanism ' counts the length of the transaction queues at the 
mmecritace unit's receive buffers. When this length exceeds 
@uemecestablished threshold value, the node suffering a long 
Meee transmits a "SLOW" message which forces the rate of 
m@@encyiamic data update to be reduced so that instead of 30 
Meeieperiods {which is the standard) it becomes 30+10. This 
m@erementation continues on an n+10 basis up to 60 scan periods 
Meemenuces) if it 1s required. When the length of the queues 


meme) | noaes starts decreasing. the node which has transmitted 


ie} 2/ 
Mg@emtast “SLOW message starts transmitting a "FAST" message 
that decrements the number of scan periods corresponding to 


miemoystem'’s rate of operation by 10 (the same way) down to 


Mmemstandard of 30 scan periods (3 minutes}. 
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PeeeMUluetprecessor Nocé Saturation 

Beets sooSsioy le ntOr a ciyenm sSurvelllance subarea to 
Beeerience a high target density situation. In this case, 
Mmempy Utilizing the standby processors it hosts, it becomes 
@umossible to satisfy the surveillance requirements in its 
Subarea, another node's contribution is requested. 

ime procedure followed requires the saturated node 
memtransmit a special "OVERLOAD" message, which indicates 
mae a node is ready to transfer the control of some of its 
memieors lying close to adjacent subareas. The sequence of 
Me@mercr 1S preestablished (€.g. specific radars are listed 
mean array). t{fhis hand-over procedure takes place in steps 
Mbayer stripping). When the load at the overloaded multi- 
meoeessOr node is reduced, a "RELAX" message 1S transmitted 
Meeetne node which has originated the OVERLOAD message and 


the control of its sensors is reassumed in reverse order. 
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IV. DATA AND PROGRAM ORGANIZATION WITHIN 
THE COMPUTING NODE 
A. PROCESS/TASK ORGANIZATION 

Bach Of the Computing nodes of the C3 system has a simi- 
lar internal process/task organization. Processes specially 
designed for the manipulation of data of all the sensors/ 
weapons systems do reside into each computing (or processing) 
node. This enables the nodes to exercise their take-over 
functions whenever neighboring nodes fail. 

In this section only the organization of the processes 
in the radar module complex will be presented in detail 
memeere [V¥-1). Similar 1s the structure of the rest of the 
sensors/weapons systems module complexes with minor 


differences. 


a 


SHARED MEMORY 


ATED RECORDS 









secon | 


t 
FURTHER 








MODULE = ——~ oo 
| a MODULE | 
mee ORTS 
FROM RADAR 
Pawo eminmne sequence Of Processes in 


the Radar Module Complex. 
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1. Assumptions 

The assumptions on which the organization of the 
Peocesses is based are listed below: 

a. All radars are surface search ones with an equal 
Aerial Rotation Period (ARP) of 6 seconds (otherwise referred 
meas ‘Scan period"). There is no height finding capability. 

Naddpecemmect tone seceors are Circular with a radius 
eeoal tO their maximum detection range. This helps in reduc- 
ing redundancy and in resolving conflicts in cases where two 
neighboring radars happen to be tracking the same target. 

c. Each individual radar in the subarea can have 
Meetons Of overlapping sectors with at most 4 neighboring 
Mmetars. in addition, no more than 3 different radar sectors 
man Overlap over any given region. This assumption is not 
memsadered aS Strictly restrictive to the system. It would 
Seeere tO function even if 5 or 6 radar sectors where over- 
lapping (with some modifications in the software). 

(ee ice ye OeCttNCSeoOr te targets the system may 
Meaek are up to 1000 knots. Minor modifications to the soft- 
meeeemodules would enable the tracking of targets with higher 
memocities. 

e. Target density in the area is'0.007 targets/sq/Km. 

be targetsecan be of any of the following types 
(both militarv and commercial): 

eh) eoliiees 


(fjieenelrecopters 


oe 





(3) Submarines 
(4) A/C and missiles flying at low altitude. 
Pee tane@cess Organization 

ite seomevare modules @f the Radar module complex are 
Meeanized SO aS to be executed by dedicated and nondedicated 
meyete board computers (SBC). A description of each one of 
fmmese and of the Radar interface processes follows (the SBCs 
Memereated to the execution of the radar interface modules 
mee physically located at the radar sites instead of at the 
fmetiprocessor node). 

me Radar [interface Module (RIM) 

PAeimeuaain isedairectily (point-to-point) connected to 
meet odar module complex through an interface unit. Inter- 
Mme@eenunits are located close to the radar site. All detection 
mmomals (reports) from the radars are transmitted in real- 
mmm@eecnrough wiring to their corresponding interface units. 
Miese reports (raw analog data) include the polar coordinates 
Meme radar return (report) and a size value for these 
memericns. ihe RIM converts the polar coordinates into car- 
Mmmm (XxX, Y) in km. In addition, it attaches to this position 
meerne COmponent taken from a copy of the global clock. The 
meeert record formed has the tollowing structure: 

coe er eerie cOOndney COOTdy size ) 


Smee lie Size OL a report 1S measured on a scale l to 3. 
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Merc DOm@uommeeteeTemmey Mave been processed, are 
meaged into the SCAN REPORT BUFFER. This buffer holds the 
meportS acquired over one scan period (6 seconds). 

Vici weroOnmOn Me Newescan perlod isedone by the 
memeduler module of the Radar module complex through an 


Event count message. 


(x-cO6rd,y-coord, time,size) 
TO LOCAL CORRELATION 
MODU 


RADAR SET 


SERS 





SCAN REPORT 







BUPEER 


CONVERT POLA 






bearing/range/size TO CARTESIAN 


Pewinem voz Rodan interface Module. 


me bocal Correlation Module (LCM) 

PGi se COhmeceed through tiber-optic cable to 
moe at the multiprocessor node's physical location. This 
Memes dedicated to the execution of a Local Correlation 
Semerremcorresponding to its particular radar sector. Every 


Meer Sector is divided into four quadrant sectors (000-090, 
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w90-180, etc.). This division is used by the system's over- 
load handling mechanism which will be described later in this 
Mifapter. This module every 6 seconds (Scan period) reads-in 
mre report data from the RADAR BUFFER of its assigned RIM 
aaa aoes the following: 

a. Uses special overload relaxing mechanisms that 
mame OVeEr in cases where the number of reports loaded in "X" 
meom the radar buffer at any one scan is greater than 40. 

b. Attempts to associate report data with the already 
Sersting tracks. 

Gee iietializes Mew tracks. 

d. Separates the data that belong to tracks which 
Meeein the regions where the sector overlaps with other 
sectors. 

e. Updates the shared memory with the remaining 
data. 

Ece@ele. Hammtains a number of internal butfers in 
meer tO facilitate data manipulation. These are: 

eolEne rN 

BeeccopoescpOteumeata that 1S read from the SCAN 

MerORT BUFFER of the RIM. 

b. Unresolved Reports Buffer "T" 

PewnieladsSwEnesrepenrt data which has not been 

Mmemgetated With any track, or has not been used to initialize 


mumeex fOr SIX Consecutive scan periods (36 seconds). 
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Ga lemporary Track Pool “‘TPOOL" 

Leekeepseall “alive” track data in the radar 
menor (a track is erased if no update has taken place for 
536 consecutive seconds). 

dame track Pool “POOL 

It holds tracks that have been successfully as- 
meetated with report data, initialized tracks or reports 
which have been acquired during the last scan. 

Se otkincamuenOnyeupdaee Butter “Y" 

PeNComomene wcdtd “eat does not need further 

@emrelation, and is ready to update the subarea shared memory. 
PE Scmanoce butters “'Z"" 

neve hold tite track data of the regions where 
m@es radar sector overlaps with neighboring ones. 

weaerceancae BUrbers “RP OVER FLOW" 

These buffers are filled only in cases where the 
member Of reports loaded in "X" is greater than 40 (which is 
Memmodered aS the upper capacity limit for "X"). Its con- 
Memes are the reports falling within the limits of the quadrant 
Seetne radar sector lying close to another radar sector. 
Miese reports are erased from the overloaded internal buffer 
ox. 

imeewemace Burters “TR OVER FLOW" 

These buffers are filled only in cases where the 
Meee oponding “RP OVER FLOW” buffers have been filled, and 
Molds these tracks that lie within the same radar sector 


Maadrants. 
Ieee 





Meee: Each radar sector is divided into the four principal 
qudcmeanmes mOUuG-9090- O9O-180, etc.) In cases where an 
SBC which is dedicated to a particular radar becomes 
overloaded, its load is relaxed by a standby SBC 
UCtmeractecmoveretne handing ot Cargel reports lying 
PicredenOnewor two duddranes Until the Original pro- 
Gessor is no longer overloaded. When the situation 
Joie OiGctioieddan Sector 1S relaxed; the original 
Prmm@eessOmtaxcs OVeT again the handling of the reports 
Micmeadekonuilatmpayvsically belong to it. 


iiiiemewcermmal view or a LGM 1s shown in Figure I[V=-3. 


_ ; 
| 
TO SHARED 
FROM RADA 3 
INTERFACE_MODUBE PaCeGe tire OURan © LAT tO N MEMORY 
TO MULTIPLE 


a? 
MeecOOrd,y-coord, 
time ,size) 






EXCHANGE REGION COR= 






MOND. Ge BUFFERS 


TRACKS /REPORTG) “EEATION 
RAC: | MODULES 


ae a ee ne | 


| 


EVC 
from Scheduler 


EecGewl) “oO-me Local Conrnelation Module. 


The internal view of the module (as described 


meeve) 1S Shown in Figure [V-4. 
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MH SHARED 





Ld Ne ” 

MEMORY 

; TO 
EXCHANGE 
or” UR EOO Las BUFFERS 
? Jf ? 
Beige vere elLOcal Correlation Module 
Pitemmat Vv Lew. 
iiemopcaomloi Of Ene LOM can be Summarized as 

follows: 


memeeirdack records are transferred from POOL to TPOOL, 


ama POOL is cleared. 


fe Ge ores. and tracks are erased from both T, 
mae 1 POOL. 
Zz ce mniUMbem Om) reports Im X 15 greater than 40, 


meem some Of the data in the internal buffers X, T and TPOOL 
Meperansterred to standby processors (relaxed). 

Em ReDOrts in X are associated with "“alive™ tracks in 
Meek in two passes (one with the assumption that the target 


1S mOving with a constant velocity and heading, and the other 
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Memrm a realistic Change of these attributes). Each associated 
report/track pair is erased from X and TPOOL respectively, 
maa iS written into POOL. 

ea clonic he porto im XA are merced With reports in T, 
Mitece track initialization is attempted. For each successful 
m@tetalization, the track 1S written into POOL and these 
Meports are erased from T. Reports which have not been used 
Meretrack initiation are considered as initia reports and are 
meereced into POOL. At the end of this phase X must be empty. 
MeeontsS and initialized tracks are assigned a track no. 

meiae neports im 2 whicéia tall in a radar common region 
meceioaded into POOL. 

ge. Tracks and Reports in POOL (which now all have their 
temporary track number) are distributed according to their 
meeoTraphical position among the Y and Z buffers. 

fmeeinie Shared memory 1S updated with track data in Y. 

mee butters « are unloaded into the EXCHANGE BUFFERS. 

mre tOllowing alcorithms formalize the operation: 

Pl: HeGrresmonds £o sector 1) 

GoOeLOoreve x 
Game aweme (eveti). TH( 1) ) 


Mipcom racaremltter Lreports into X) 
ieeveerdday Oud Ee. 


Pome Ome se Ue tnen 
if sum reports = 40 then 
call de relax(resume handling of passovers) 
call transfer (track records from POOL to TPOOL) 
reno ne DO tS 40 then 
en re lax (pass handling of some reports 


dmcmerdaewseOQ Standby processor } 
Gpeewcourelatcl “(correlates/initializes tracks) 
SumscedmaLvehe separates tracks in POOL into Y,2} 
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Cuore emdeksS in 2 to exchange buffers ) 

elev ouLrers. Z 

call update (update shared memory from Y) 

call advance (evc(1,i)) (increment the event count 
Sree weeCMmonle Loec1on cor - 
relator noawles ) 

ime) = THCL) + 1 

end do 
end Pl 


BORRELATE!;: (report-to-track correlation) 
elcome POoOk irom “old” tracks 
oan heerom. Old” reports 
call pass 1 xtuoeolate caci track im 1POOL and 
aswGrrrewhehncdel Lepore am < by 
bepOhe-bO-trdex —45SOCilaAtion} 
SmpaccczeleXtrapelate e€aeéh remaining track in. TPOOL 
associate and with each remaining report 
MiP VeGeport-tO-track association) 
een hetce reports in XX and | into T,and 
initialize new tracks by report-to- 
GopORewassOCialion) . 
SmoeeCORRELATE | 


Vie wand iddvwamce’ are Svnchromuzatloneprimi - 
meyes Which are used to check if the event count has exceeded 
Maemwenbeshold value (both passed as actual parameters), and 


mememerement the event count respectively. 


fee common Resion Correlation Module (CRCM) 
taemi@ateles Of this kind are of two types. The ‘‘dual- 
meee es and the ‘triple revsion"’ ones. Their only ditter- 


Meets that the former handles the cases where target tracks 
emeeeinside tne limits of two instead of three radar sectors 
Sverlappins regions. CRCMs are not executed by dedicated 
Mmeecessors. <Any one of a group ot SBCs which is available 
eeecetu ces them. 

iiommipbtrm tO tumese Modules 15 a Set of track records 
Memeemic t£Ormat described in the LCM subsection. Their output 


1s updates to the shared memory. 
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The cycle 1s repeated every 6 seconds {one radar scan 
period), and can be summarized as follows: 
a. Track-to-track association (two different radars). 
b. Track number correction (when necessary). 


c. Shared memory update. 
feeeeerOr triple régions steps (1) and (2) are done twice. 


The external view of these modules is shown in 


Figure IV-S. 
















association list Bye ey 
ihe = 
‘ ! 
! 
1. > 
MULTIPLE REGION 
| pn MEMORY 
CORRELATION MODULE 
= cons (2AM | 
RECORDS | 
i 
| eee eee 
BVG. 
from LCM 
peoUre wl V-5.  Commem Region Correlation Module. 


The following internal buffers are considered as 


Mereessary tor its efficient functioning: 


Mouicrers “Y)]": They hold all track records as they 
are read from the various EXCHANGE BUFFERS. 


Meeeeouirer “YR': It hoids successfully associated tracks 
which are ready to update the memory module. 
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peor Vins el temolds tracks successfully associated, 
MUmetldiMadeesoet Ob 10Gener assSOCclation (only in triple 
Smee e tron correlation modules). 


Q 


Beeeputter “AT: ft holds pairs of track numbers which 
DesOMCmUCmEMdGCssOrehepoOrks that nave been successfully 
associated in the past. 


[iemiiteriakh views of 4a dualla and a triple €RCMs are 


meme in Ficures [V-6, and IV-7 respectively. 





|'SHARED MEMORY 





UPDATE 


Petco m yor inhuernal View of Dual CREM. 


fiitemoperacremeot ene CREM can be summarized as follows: 

Peeottiter At (Associated Tracks) is loaded directly 
from the shared memory. 

beeeeaeim one Of tne eracxks COMmine from the exchange 
bierer of one of the LCMs is associated with each one of the 


Meeks COMing from one of the exchange buffers of the other 


ey 





from Shared Memory 


ayy P AT 


HARED 


“a id ee MEMORY 
«a - “Lae 


Pion internal view Of Triple CRCM. 


mem. The track number of each successfully associated track 
1S Ghanged and the pair of these two track numbers is loaded 
meeo buffer AT. 
c. Associated tracks are transferred to YR and 
eeeosed from the Yls. 
Week cWemdyitnio tracks are transferred to YR (unassociated) . 
Meee rOr the triple CRCMs the remaining tracks are trans- 
memrea tO, and the track-to-track association is 
mepeated Ones MOTre wamemewthne Contents of YTR»and the 
miele cinalbly all réports are transferred to YR). 
eae omoinared Memery 1s updated wlth the contents 


SeeiR, and all internal buffers are emptied. 
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The following algorithms describe the above functions 
moa formal way: 


eee : Ceemmens rearon Of sectors | and 2) 
do forever 
eeieaWwaistemteve(l. 7). TH( 1.2) } 
input (exchange buffers reports into Yls) 
MipUuemlaAsc@Gltadtlonm pars into AT buffer) 
empty exchange buffers 
call correlate2 (track-to-track associations) 
call update (updates the shared memory from YR) 
eipisy DuUEEers Yl, YR, AT 
lel (lee hile 2 it 92 
end 
ema P)2 


fa23: (common region of sectors 1,2,and 3) 
do forever 
enmanaeemen evel 225) > TH(1.2,5) ) 
Paplitmce <enange putters into Y1s) 
Mite assoeechdulan Eniples Or padlrs into AT buffer) 
eipemwecxenange buffers 


Gaile correlate? Ceiaeks Or the two. first Yes} 
call correlate2 Meracks Orsremainine Yl.) and 
YTR) 

Ca i eiediate (updates the shared memory) 


CHO ya elbet CS ie yin R 
Dies) = Tall ez 5) + 3 


end 
ema P1253 
Mote: imatces in eves and THs refer to the serial numbers 


of the radars involved in the cross-correlation. 
6. Scheduler Module (SM) 
imommnodliMe  sconerols the whole operation of the radar 
@omplex of the surveillance system. its onlv output is the 
Mempeeied “sixsec evc’’ which flags the start of each new 
meameperiod (6 seconds) and comes from a local clock. This 
memsyncnronized by the multiprocessor control module complex 


Merouch a synchronization message. Its outputs are two kinds 
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of event counts, interface modules, and one to the local 
meerelation modules (rad evc and evc respectively). 

The SM is executed by a dedicated SBC. This module 
meso controls the operation of the clock and initiates the 
Suerodding of all track report data residing in the shared 
Memory into the local memory module and the multisensor cor- 
Memeation complexes which further associate them with data 
mernered by other sensor systems. 

Beene tuner ronaluty ean be better shown in the follow- 


me algorithm: 


P: 
Soil Start (suGeteene ssvstemn and the global clock) 
do forever 
GAiimawiut (Sic ec. TH) 
for each eve set do 
call advance(rad evc(i)) (EOREONe Stim Ede a7 
- interface module) 
call advance(evc(i)) (Torr thie: 1th cor: 
relacton module) 
call mem unload () 
end do 7 
ey “+ ii 
end do 
end P 
7. Shared Memory 


iiemsianed Wiemeny Of the radar module complex is a 
64K RAM memory which holds both data and processes. The data 
Mmeaemea there are the track records, the unassociated reports 
Mamtne crack number association pairs/triples mentioned in 
mmeemeemev1iOUS Paragraphs. All these refer to the currently 
Mmereked platforms. All the processes used in the module 
memiomex are stored in the shared memory. the space blocks 
meemored by precesses and data are predefined. 


ea) 






Whenever one of the CRCMs is invoked, a nondedicated 
Mmeeescsor (55C) of the complex is utilized, the proper process 
Meaproaded into the SBC’s own memory and execution begins. 

The block of the shared memory holding the track/ 
meport data is transmitted on the bus to the multisensor 
system correlation, local memory and I/O module complexes of 
m@eemultiprocessor node. This action is controlled by the 
SoM. Figure I[V-8 shows how the shared memory of the radar 


module complex is divided. 


ASSOCIATION LIST 


AGlUVE PROCESS TABLE 


DATA 


(TRACK/REPORT RECODS) 





Freure IV¥-S. Shared Memory Division. 


oe odule Integration 
Since ail module's internal structure has been 

meeenmiped in detail, the integrated system consisting of all 

mmemapOve 1S Shown in Figure IV-9. All links between the 


Processes are marked. 
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The time that 1s required by the radar module complex 
meme riorm the correlation of all data collected over one 
Meeiemscan period 1S critical to the operation of the whole 
System. 

eetiomoniweysts Or ewents 21S Shown in Figure [V-10. 
Memeome che required time each one of the processes takes to 
MeeecessS a maximum number of 40 "active" tracks is given in 
meee. ihese maximum times (6 seconds) correspond to the 
mememrt Will take to perform 40 track initializations (40 
Mmeoorcs On the last scan and about a hundred of previous 
Beeomeere ports in buffer "T" taken in triples in all combina- 


Mmeons). AlSoO the actual time a given sample of report data 


dee 
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takes to be manipulated is indicated with shadowed boxes 
Within the 6 sec boxes. If the process terminates sooner 
maim 6 Seconds, the processor stays idle until the data 


meee Next scan period arrives. 


B. DATA CORRELATION 

Miemoretne Critical fumetions of the radar module complex 
mmmene multiprocessor node 1s the synthesis of radar infor- 
Meron about enemy, friendly, and unknow identity ships, 
mmemarines, aircraft, and missiles in the subarea. 

mimorder to Cope with the situation, modern ocean sur- 
Metilance systems had to become computerized. What computers 
fmemeal!led to do is to replace human operators in target 


medekineg and classification (partially). Both of these 
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Mmmecesses rély primarily on the correlation of data items 
referring to the various targets in the area. This data 
Sither preexists in a data base, or is collected by a chain 
mea sensors. 
litewreduered Output of a Computerized surveillance system 

consists of a set of resolved target tracks, followed by as 
men eXtra information as desirable. In order to do these 
meseweeene tollowing steps must be completed in real-time: 

Weelrack update/initiation. 


Meee aiculation of more geolocation data (velocitv, heading, 
Seen eptOr each track. 


Mepeestimation of additional constant, and discrete track 
enawacteristics. 


The above steps directly imply the use of data correla- 
mmeme (Or aSsociation) algorithms. A great variety of such 
algorithms have been developed over the last 20 years. Some 
survey papers [Refs. 12, 22 and 25] reflect most of these 
Peeeorts. In addition, a project by the Naval Research Lab- 
Smacory (Washington, D.C.) has produced a great variety of 
Memers and reports on the subject. The Naval Ocean-Surveillance 
@eerelation Handbook project [Refs. 6, 24] is an overview 
of the existing literature in this area. It also summarizes 
the major topics of research towards more efficient correla- 
tion aigorithms (in terms ot speed and reliability). 

Mest Of the €xisting algorithms provide for multiple 
Memes tracking, track initiation, isolation of false alarms, 


coping with missing measurements, and other general or special 
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meses (aS merging, splitting, etc. of tracks) which will be 
analyzed in more detail in the following sections. Among 
them, there is a group of algorithms which imply "multiple- 
Secor relaction’, “sophisticated data partitioning”, "recur- 
Mmeness'’, and take advantage of the discrete in addition to 
M@@emeOntinuous target characteristics. These algorithms are 
miseer than the rest. 

The present section overviews the general surveillance 
Meee ation aleorithm characteristics. It further concen- 
meres On the ones used by this system. 

Mere tatron alceorithms Can be Categorized into report-to- 
meer, report-to-track and track-to-track. Each one of 
Meremmers Utilized during a different phase of the correlation 
mProcess. 

[eee Clariitications 

Some clarification 1s considered necessary for under- 
mererne Correlation algorithms in general as well as for 
/miemopecitic ones used by the proposed system. Collected 
data must be associated with data existing in some storage 
mea. Ihis way, the most reliable information can be derived 
@eeeach individual target within the limits of the surveillance 
Meranda the decision-makers will have a clear picture on 
which to base their decisions. 

ittewuec1on 1s Scanned im three dimensions (air, 

Meetee, and SuUbSUTritace), with the objective of collecting 


as much reliable information as necessary, primarily on 


iis 






Mostile Or potentially hostile targets (geolocation, discrete, 

mad cONnStant characteristics). 
foe erm A formated description of an observation by a 
sensor of the surveillance system. Each report includes 
a time of observation plus geolocation data (range and 
bearing from the radar position). 
SCAN DATA: <A set of reports coming from the same radar, 
which were obtained during a scan period. At most one 
report of a scan refers to each target in the area. 
TRACK: A set of reports obtained over an extended time 
Span, which are judged as relating to the same platform. 
Zeon eAbARM: A Contact detection coming from a sensor, 
MOt Originating from a real target. 


TARGET CORRELATION: The decision that two or more ele- 


ments in the set of collected data have a specific 


relation. 
mee Overall Correlation 


When the sensors of the surveillance system are 
locally separated (as tor the system described in this 
jmesis), the conversion of the incoming geolocation data to 
Meeonmon coordinate system 1S unavoidable. The general 
Mepreach to the multiple site correlation problem is to 
memmence through the tracks of a given site and examine each 
Miemor another site's tracks in order to determine which 


track, if any, originates from the same object. 





Morefield's methodology [Ref. 25] is considered as 


Mery representative of the case. The method is illustrated 


mae Figure I[V-11 below. 


TRACK 
ea ane 
eet? tL" 4 rormarron 
be 
FeDOLE Repost | Report| Repqrs 
#4 #3 #2 #1 


ASSQCIAT 








oe COMMON 





MEMORY 
ON 


TRACK 
Peporet Repoyt jRepor 
FORMATION 


Pence V-llwetNovrerield's Method. 


According to this method, reports collected by each 
mrarvidual sensor are correlated separately at the local 
@etadar) level. This correlation has two main tasks; (a) to 
Meate €xXisting tracks (report-to-track association), and 
mmpeeto aSSOCiate individual reports in order to initialize 
Mmeteks Or isolate false alarms (report-to-report). A local 
Meea Set is formed, which includes all resolved track coming 
meom the individual radar reports. On a second phase, a 
megek-=tO-track correlation algorithm is implemented to inte- 


memeetracks of the local data sets into a global data base. 


ae 






Mimt>s Way, cracks Of the same object held by more than one 
fFadar are identified and a clear picture is offered to the 
decision-maker. The same approach is taken by Bowman [Ref. 
26] (he uses a maximum likelihood approach). In this later 
Memes tie 1Ssue 1S extended to include different generic 
mypes Of sensors. 

Pim MeMcmGihEste correlation phase the polar coordi - 
Mae system is used. Before entering the second phase (track- 
memcrack) positional data has to be converted to the global 
Barcesian coordinate system. 

[iene ictalbeappiodemmtakem in most of the correlation 
mecorithms is carried out in terms of "passes" based on a 
most likelihood" scheme. Reports are associated with exist- 
Mm@oetracks according to the criteria of how well they fit on 
Meeoeraioht line (heading) and on regular intervals (constant 
Mamee@eity). tracks of this family are called "well behaving". 
Bemsequent passes are treating the so called "less well be- 
Meee tracks in an increasing difficult sequence. Reports 
Mmemeare correlated are removed from further consideration. 
itemremaining data is analvzed according to different cri- 
Meee etc. tIhis stepwise correlation methodology is dis- 
cussed in more detail by Wiener [Ref. 27]. Figures IV-12, 
moro and IV-14 illustrate the stepwise correlation.. This 
method is utilized for the conceptual surveillance system 


Scimis thesis because of its simplicity. 
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Figure Ewe le , liaiemst PrReturce- 


Figure IV-15. Well-Behaving cere cor 


Near 


Figure IV-14. Second (final) Pass. 


Be, 





Pee lOmeueeo-Repore Correlation 
SouGolteren 1s PEFLOrmMed Dy associating data reported 
Meer a scan period with data reported during the same scan 
Mentod by another radar, or data reported by the same or 
mmaer radar on the previous scan period. It is used in two 
masses. 
ities first 1S whem there are two radars with overlap- 
Mee detection sectors and it is desired to determine for 
men specific individual report if it comes from different 
meeeets (each one detected by one of the radars). An assump- 
meen which has to be made in order to implement this kind of 
meme lation algorithm is that the reports refer to the same 
Pemcaemost the same time. The mathematical formulation of 
m@eeproblem is expressed by the following equations: 
Zn 
cag ee 


mere 2Z{1}) represents the position as reported by radar i, 


mo (hl inadarn 71] 


it 


(et em radar #2 | 


meets the actual target position, 
meme) 15 the position report error of radar i. 
feiemmerOrEed BOstt1ons 2z{1) belong to the same 
Memoct, their Pythagorean distance has to be less than, or 
equal to the two radar's measurement error. Otherwise the 
Mmeeertcs refer to different targets. 
MicmsceonGucace mwhere Feport-tO-report correlation 


Mmecd, appears while trying to find candidates for track 






initiation at the single radar level [Ref. 24]. The case is 
briefly addressed here. In case there exists information on 
the maximum, and minimum velocities of the observed target, 
an annulus can be drawn which is centered on one of the two 
meesequently reported positions. The inner diameter of the 
annulus will be the minimum, and the outer diameter the max- 
mam target velocity. These are multiplied by the elapsed 
meme Detween the two reports. Positional data are positively 
meoclated it one of the positions falls inside the other's 
annulus. When only a maximum velocity is known the annulus 
Becomes a circle. Finally, when neither the minimum nor the 
memeimum velocities are known, an “absolute maximum velocity" 


meombaces the second (Figure IV-15). 


Rt, -t) 


r-V_{t,-t,) max speed 





Beoure  siV-l5- Heading Unknown. 





teedocomiiiemomt ne reports Include heading informa- 
mpon aS well the annulus becomes an annulus sector and the 
Meee e Decomes a circular sector respectively (Figure IV-16). 

HieteelemuepoOnes Inclide extra discrete data, special 


@ases apply [Ref. 24]. 


headingXinfo. 





Peace volo Heading Known. 


Mepismelcaretnd@: track Imitiation amblouities need 
not be resolved based on only two consecutive reports. If 
required, more reports should be considered. It must be 
kept in mind that as the number of unresolved tracks and the 
meme r Of SCans grows, the number of hypotheses to be con- 
Sidered increases exponentially and the system quickly becomes 


overloaded. 






We cOOore eos twack Correlation 

[io neteccomm~eor correlation processes is based on 
Maes assumption that a file consisting of track records already 
peemsts. scan data coming from a sensor system is associated 
with these existing tracks. This method is more suitable 
mepecdta partitioning. Each track consists of geolocation, 
discrete, and fixed attributes. 

The geolocation information has to include: (a) 
pOSitional history of the track, either over a fixed time- 
memeor expressed as a fixed number of consecutive position 
meeerrs, and (b) heading/velocity information. 

icwiumoect sor past positions Kept in each track record 
momeres trom application to application. Whenever a new set 
femmeeroorts 1S injected into the system, the probability den- 
Mmmm otr the position of each track is dead-reckoned to the 
meen Ot this report. This way, measures of report-to-track 
Memerehation are developed (e€.¢g. distance between the projected 
Mmevex., and the observed report). The resulting measures of 
@omemelation plus data on present reports are used to update 
Miemerdeks into the track file. If in the definition of 
Meme One-DOiInt-tracks are accepted, then report-to-report 
memere tation can be viewed as a special case of report-to-track. 

Mest Of the special cases can be handled more effi- 
miemery by using report-to-track correlation algorithms. 
fememor these are track splitting, merging, deletion, missing 


ee, 


Mmeeerus, and false alarm handling. Dense target, land proximity, 


sas 





mm Clutter environment Situations are also better handled 
mimthe report-to-track approach. 
Gack -to-lrack sCorrelation 

Witsmeaocecanme pewconsidered as including the report- 
Meee port and the réport-to-track (a report iS a special 
mse OL a track) correlation. The situations where its use 
ms meeded are: 

a. When there are two cooperating (neighboring 
Meaeking) systems, each maintaining its own track file. In 
Bamsecase the procedure followed can be analyzed into (1) 
@@encorrelation of tracks coming trom both of these systems, 
mameeene determination of the ones which are duplicates, and 
(3) the creation of a global data base where each track is 
Mmererenced once. 

B®. When dealine with different generic classes of 
omens (6,0. radars, active sonars, ESM, hydrophones, IR 
Memeeronrs, €fc.}) In this case it 1s preferred to integrate 
meme eclaSses Of information, and create a more complete 
meremx CeSCription scheme. 

Piel irOmmacloneemecaden One of the track files is 
meee d CO different times a series of interpolations must 
Memeeertormed for the data of both tracking svstems. These 
mimemoolations are followed by a series of point-to-point 
Mees@erations. {it 1S obvious that this category of algorithms 


menore Lime consuming, but it 15 unique for the case of 


ee) 2) 


memomooring Surveillance systems. This method is used in 





mene Common Region Correlation modules of the radar module 


memplex in the multiprocessor nodes of the system. 


fee PRACK IDENTIFICATION 

As described in the previous chapter and in Appendix A, 
a track record has a number of elements which are considered 
Meemecessary for its association and/or display. A more 
M@eeailed description of the elements of the track record is 
meovided below. 

meee ltack Record Format 

ie’ £Ormac ot the track records as they are produced 

myecthne Local Correlation module is as follows: 
TRACK 
Segoe cime2, times, x coord!, Y coordl, x coord2, y coord2, 
ueimaie, y COOTdS, heading, speed, size, track no, id, type) 


menel Corresponds to position |l (it is expressed in hrs, 
hain. sec) 


meecOoma, y CoOOrd are fractional numbers expressing the x, 
yecoordinates of the position in km 


meaaaine is expressed in whole degrees, 

Speed is expressed in whole knots. 

merex-Nimber 1S an integer with the first two digits 
denoting the identity of the detecting radar (e.g. 
eee.) , and the remaining ones its sequence number 
Meese ino tO the radar (when 60 is reached we start 
feotoning the emptied numbers from 0 and on). 


Pome eennee-diehy imtecer whose last digit represents 
ome Of the following: 


G2 Sfriendly 


ies enemy 





Gap neutral 
3: unknown 
ipo lSe a enmee-digit integer whose first two digits 
eomnespema tO the type of the target as follows: 
Oe melitary aircraft 
i Warship 
(ae Peary ie Teopte rT 
03: submarine 
04: missile 
te Unassrened 
ice weMerenant airerart 
i eee Genant helicopter 
08: merchant ship 
Ve  unlassioned 
miewlasted!@immcdet mes the specific type of the 
ose ee ese dilyerart Carrier, etc.) 
aeeneeemecnanisms for the determination of the three last 
PErGm adiherioutes have not yet been incorporated. 
me irack Number Allocation 
Edeleenbaek Or Unresolved report coming from a given 
Meee 1S assigned a track number. This track number is 
memmed aS described in the previous paragraphs. The alloca- 
feomeor the track numbers is done by each Local Correlation 
module. This module accounts for the assigned and unassigned 


track numbers. 
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itidemunbers assigned to tracks or reports lying 
Sueside the common regions of overlapping radars keep their 
Mssiened track numbers. For the ones that are detected in- 
Side the common regions, permanent track numbers are assigned 
by the common region correlation modules. 

When a report, detected by two different radars, comes 
to this module, it is assigned the track number given by the 
tocal correlation module serving the radar that detected it 
merst. 

Subsequently, both of these track numbers are stored 
micro a SO Called Association Track buffer (AT) in the multi- 
ple common region correlation module. This way, whenever 
one of the Local Correlation modules sends the same record 
meee. Or report) to this module, tedious correlations are 
meemced. ithe track number passed to the shared memory of 
Mm@remradar module complex is the one assigned by the initial 


Serector. 


See UL ICAL SITUATION ASSESSMENT 

Memrias Previously mentioned, target classification is 
very important in surveillance systems. Morefield, Bowman 
and Murphy address the subject of tracking and recognition 
concurrently [Refs. 28, 29]. Their correlation scheme con- 
Meeemoeali Sensor reports together to form the "'best estimate" 
@eeene “Surveillance volume’. The general algorithm can be 


@eseribed as follows (see also Figure IV-17): 





Mee encoce tic neperes (from a variety of Sensors) in 
Soumon terms. 


mee ecenerate feasible correlation hypotheses. 
mumeivalilate feasible correlation hypotheses. 

The approaches of Smith/Winter [Ref. 30], Smith [Ref. 51], 
and Witte/Lucas [Ref. 32] treat the subject from the pattern 
recognition aspect. The latest approach (1) avoids maximum 
mexelihood decision techniques, (2) automatically identifies 
meeas Of data inadequacy, and (5) permits the realization of 
Sreetull implication of ambiguous data. 

mereman, and Baron address the tracking problems encoun- 
tered in using sonars [Ref. 35]. They discuss the limitations 
Semunderwater Surveillance imposed by both active and passive 
memars, by the environment and by the targets themselves. 
Their correlation algorithm is a suboptimal one (they are 
Memeeeain Extended Kalman Filter). Even if geolocation data 
goes not have high accuracy, doppler radar data has a unique 
Meeradeteristic which indicates movement and gives a positive 
Mees itication clue. A more recent paper by Fortman, Bar 
Shalom, and Scheffe [Ref. 54] introduces the Probabilistic 
WeeeeAssOcliation approach into sonar applications. Their 
eeeorithm is also limited to passive sonars only. 

Algorithms that more effectively handle the multi-target/ 
ieee sensor case in cluttered environments have been created 


ByeReid and Goodman [Refs. 23, 55]. 





Paeecdrcdlbyweamtterent approach 15 the one taken by 
Friedlander, and Anton [Ref. 56]. Instead of treating the 
Basic detection and location estimation separately for each 
mepaet, a simultaneous estimation of multitarget locations 
is made. The two key ideas used are: (1) the formulation 
Seetne multitarget problem as a multichannel estimation one, 
and (2) the representation of the multisensor data by the 
Berameters of a model which fits all the available data. 


Friedlander has expanded this work some more [Ref. 57]. 
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Dewumemv- b/s Flowchare for Multi-tarcet 
Multisensor Correlation. 
mieers Which aré more oriented to the ocean surveillance 
target tracking are [Ref. 12] by Reid and [Ref. 58] by Atkin- 
emer ne last deals with the problem of developing a quan- 


Mmeeative and physically meaningful measure of association, 





Mmeomeamime tie discrete attributes Contained in the report 
Mia tracked target with the continuous ones. The final 
@esOociation derives additional information by comparing 


Seeemeenem, velocity and discrete characteristics or emissions. 


Bees tHE HUMAN INTERFACE 

iiemlast and one of the most crucial functions of any 
Meee rllance system 1S the alertment of the decision-maker(s) 
mmermder tO initiate responses to developing threats. This 
eameoe accomplished through a variety of man-machine inter- 
mace means. 

Pema sIntOrmation 15 presented in this conceptual 
model of the surveillance svstem is by means of video displays 
on large screens and private (one man) consoles. Two kinds 
M@eevrsual information iS provided, graphic and alphanumeric. 
fi@eweraphic information is categorized into land masses and 
femiye tracks. Alphanumeric information is supplementarv to 
Meemeraphical and gives descriptional information. There 
Seeeoes an Option to display the active tracks only (not land 
itewes). iihis is chosen manually by the operator of each 
individual display. 

Land mass information is stored into a separate memory 
Mmeemeted tO the display system complex. Each one of the 
memory Clusters is a block corresponding to a 10 X 10 sq. 
feeeosearea on the global tactical grid. Land intormation 


meemores the first of the records in each block and track 
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mirormation follows. Since land occupied area does not change, 
Mmmeraddress where the first track record is stored is fixed 
miecach one of the blocks. This way the "no land" option 
Seeaisplay can be chosen at any time. 

The Operator can select the dimensions of the area he 
wants to have displayed. The minimum area that can be dis- 
meryed 15 10 X 10 sq. miles (the area covered by one memory 
meegek). Next, he can increase the area by incrementing the 
mameer OL blocks by the square of the next one block incre- 
eee TU x NOS 20 X 20, 50 X 50, ..., n*810 X n*10). 

Mim esto lo tiesarchitecture of the Human Interface 


Module (HIM) complex is shown. 
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(memerperdtion Of tmenHiM is controlled by the Scheduler 
mepeme multiprocessor node. Each time new target data is 
meamsemitted through the bus (every scan period) it also goes 
Mmemmcne HIM. tdhere the data is loaded into the display memory. 
Mise atter data transfer 1s over the interface module takes 
over and displays one Ci tdmenmmmencn videomeonsoles or Screens. 

Whenever the operator wishes to interact with the system 
[Pmamemder tO Switch to the “no-land" display mode or to request 
Peer Onal intoOrmation on a specific target, this interaction 
meee Coes through the interface module. 

Bemecne comseole display the hardware/software arrangement 
Mmemmoritlar to the one described by T. Boone in Reference 46. 

fee hardware 

The hardware necessary for the implementation of the 
msoolay 1S listed below: 
ae eobeso10 Mathematical Processor 
Lt iomueco(meOunamtpulate thetdata of the display 


Memory in Order to convert it into a convenient form for 


pees play . 
B. AN/UYQ-10 Plasma Display Set 
RemeconslSes Of evo alphanumeric and graphics 
Meembay terminals. The graphics display terminal allows 


Mmiemoperator to interact with the display system by touching 
fpemic On its front screen surface. By touching the position 
Meme a tarset is projected on the plasma display screen 


Mmerared lightbeams which form 2 rectangular matrix near 





mlemourtace Of the s@reen are interrupted. The position of 
mies tineer on the screen can be determined and hence a simple 
muaman interface can be set up. 
Smeecesl2 Board Equipped Terminal 
iis Sys reneasebeun alphanumeric and graphic 
moeaorlity. The terminal has a feature which permits selec- 
memo rasure O@feywectors; points or characters. 
mee Process Orcani zation 
ices 1 Smaeramll wien ~orocesses whach controls the 
Peeration Of the Human Interface Module. These processes 
memes cted an detazt in Reference 46 and they generally per- 
Berm the following functions: 
a. Display targets on the AN/UYq-10 Plasma Display Panel. 
Deane uorees MbOls  indtGate the type (surface, air, 
Mipsweetecwmeniadetcienclassitveation (friendly, hostile, 


Makmown) Of the tarcets. 


Seerermic the user to interact with the system and change 
eme daspilay menu. 


VUi@elemsouevarom Lon ene implementation of the above 


feome@omolex in PLI is included in Ref. 59. 


F, COMPONENT FAILURE DIAGNOSIS AND SYSTEM REORGANIZATION 
mie multiprocessor node has several internal mechanisms 
Beene diagnosis of component failures. These mechanisms 
Mmmeerate procedures to reorganize the svstem. Finally, when 
Maemor tne tailed components becomes operational again, some 
feeevery Steps are taken. <A description of some of these 


momen tolerance mechanisms follows. 






Peenoce Bus Failure 

Mimeds- erie weonnom DUS Of 4a multiprocessor node fails, 
meemsecOlaary bls takes over. The failure is sensed by the 
memeduler module of the module complexes which 1s receiving 
a synchronization signal from the control complex every 1/10th 
Gf a second (event count). Immediately after detecting the 
failure, all Scheduler Modules force the switch to the bus 
Memes lip to the secondary bus and data flow continues as before. 

Uieenewavetages the data Lost 1S limited to the data 
meewineg On the bus on a 0.05 second time span. Depending on 
mm@er that information 1s, the loss may be serious or not. 
Mmemmost serious loss of data occurs whenever data heading 
memetne Channel interface unit is lost. On the other hand, 
mmeoetsS the most improbable case since the probability of 
Beemeca loss 1s 0.00055 (the information will be delayed by 
MmemeitesS If it 1S for an update, or 6 seconds for initial 
moOrt) . 

ieomemmminonot Ene DUS Switches of the module com- 
Mieexes Activates an audio announcing mechanism which alerts 
Meemonerator(s) to take corrective action and restore the 
meemee DUS. After restoration the faultv bus, it will act 
meee secondary one. 

meee enSOmerallure 
iiemratlure @f Cme GL the sensors is, in most of the 


Bee. GaUSiIng a gap in the surveillance net (unless the 





MmemecmproOvides for coverage of ally point in the surveillance 
mpea DY multiple sensors). 

(ied) (nro 1s Seisocd wbppgmene Radar Wmteriace Module 
mej) which sends a special message to the Scheduler through 
Meme adicated SBC of the Local Correlation Module. The 
Memeauler, receiving such a failure announcement, suspends 
@ae use of all Dual Region Correlation Modules (CRCM) where 
data sensed by the failed sensor was being correlated with 
Mmamers. Instead, the data coming from the other LCM of the 
feeerecoes directly to the shared memory of the complex. 

While the sensor is down, its dedicated SBC stavs 
[Meer Arter sensor recovery, the SBC starts its operation 
eee attempting to initialize tracks since all the "old" 
aca nas been lost. 

eeeopu, Failures 
Pee vedledted SBCs 
Tictteahitinemwis sensed by the Scheduler through 
ene event count mechanism and their task is switched to the 
meemaby SBCs. The latter have to assume that no track intor- 
imemoin €x1lSts, so they start initializing tracks from the 
meoinning. 

bemvondediecated SBCs 

Mica dilmre does MOt calise any problem to the 
operation of the node since any one of them can perform the 
femmeeonivy the data correlated during the present scan period 


Mmemrost. ithe only case in which such a failure may cause 





more serious problems is when a great proportion of the non- 
Medicated SBCs tails and the remaining ones are not able to 
take the processing load. The last case seems most unreal- 
istic and it implies that many other failures have also 
occurred to the system. 

4. Shared/Common Memory Failure 

DvVOrGOpleseOLNUNecestarea memory is kept on each module 

moempLex. SO, whenever a mechanical failure is detected in 
one copy, the other copy is used instead. The same arrange- 
ment is provided for the Local Memory Complex (two RAM units 


are used). 


feo veERLOADS AND SYSTEM'S RESPONSE 

Pmeler the architecture of both the multiprocessor node 
and the individual module complexes the cases where overloads 
Simeoccur are limited. 

Bata wiich has not been riltered is not allowed to flow 
mimetic DUS Of the multiprocessor node. This reduces the 
Mees load. Only prefiltered data and control messages flow. 
Miermenare Unable to saturate it. The same can be said for 
m@eembpuses of the individual module complexes. 

waiver loads Can occur only at the Local Correlation Module's 
Mmeeeewewhnenever the capacity of the dedicated SBCs is exceeded. 
Tis can happen in cases where the number of the reports 
arriving from the Radar Interface Module is greater than 40. 


iemoemneans that in a certain radar’s sector the density of 






mherousmiassekcceded the preestablished 0.07 targets/sq.Km. 
iemsuen a case, the data associations which are to be per- 
mormea fOr both report-to-report and report-to-track correla- 
meons demand more than 6 seconds processing time. 

imeomecope With this overload case, a Special relaxing 
Mmeeianism 1S provided, which is called to execute a process 
mmierar to the one e€xecuted by the overloaded SBC. This 
"relax'’ technique is described as follows: 

Pe ccmemrculdteradar Sector 15 Subdivided into four 
Seal sectors (the 4 principal quadrants) starting from 
bearing 000. 

@eeeoomeciantsm 15 introduced, which counts the incoming 
Mmeperts into the internal buffer "X". The mechanism counts 
meemeeoctal number of reports plus the number of reports on 
aeemeone Of the 4 quadrants. 

See tt the number of reports in "'X'" exceeds 40, then, 
meeting from quadrant "A" (000-090), the number of reports 
Meee tS SUbtracted from the total number of reports in ‘"'X". 
mempee Tresult 15S a number (of reports) less than or equal 
memo, the reports lving within the limits of "A" are trans- 
ferred to a standby process served by an extra processor. 
oeeowene Samtraction of the réports in "A" 15 not enough 
_m~mmremover |Odded sector processor to be relaxed, the reports 
eeetrant "BB" (next quadrant clockwise) are subtracted (only 


mvomaquadrentS Can be serviced by the standby process). 





Note: Subtraction always starts from the quadrant which has 
Bice orcatese Number Of reports. 

5. At the same time, the records of the tracks, as well 
femene unresolved reports (internal buffer '"'T") lying in 
@aese Dass-Over quadrants, are also transferred to the standby 
process. 

Peeevnen the number of reports in "X"' drops below 10, 
Swe tne Slum Of reports in the internal buffers "X" of 
meeetne Original sector process and the standby one, is less 
mr 40, the original process takes over again. 

The above mechanism allows the Local Correlation Modules 
memoe executed within the 6 second time frame. Figure IV-19 


illustrates the mechanism. 
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Peete Oo. Relaxing Process Mechanism. 





The described mechanism has the ability to increase the 
Sustainable target density up to 0.14 targets/sq.Km. No 
other notable overload cases are believed to be possible at 


the multiprocessor node's level under the present system's 


aes ion. 





V. PERFORMANCE PREDICTION AND EVALUATION 


Pewee orncAR PERFORMANCE IMPROVEMENTS WITHIN THE NODE 

Mie wanchitecture used in’the individual nodes of the 
mmoposed surveillance system offers a variety of advantages 
mieterms Of response time and throughput. Most of the advan- 
tages are a result of the proposed implementation of the 
fees computer System described in the previous chapters. On 
immemorcner hand, the system 1S untried and requires a complex 
Meerating system to control its operation. 

Maewintroduction of multilevel busing (two levels) makes 
the system similar to the C.mmp and C.m* [Ref. 40]. In these 
Mewes the concept of multiple level of busing was first 
Mmuemecduced and offered a substantial decrease of the load 
on these buses whenever the application allows concurrent 
Bema especially filtering) computations. This way, contention 
Memeetne use of the bus is reduced and bottlenecks become more 
improbable. 

Sieamalysis Of the improvements in both the throughput 
amd the response time for this category of multicomputer 
Seeeems 1S provided in Ref. 41. In order to implement this 
alysis technique to the proposed multicomputer schema at 
the node level, it is assumed that 4 radars are contained in 
Miemradar group controlled by the Radar module complex of 


the multiprocessor node. These radars are numbered 1 to 4 
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fmemtne pairs 1-2, 2-3 and 1-4 have overlapping sectors. In 
meotton, radars 1, 2 and 5 have a triple common region of 
sector overlapping. 

=—sunimc tiiateine complexity of Computations is such that: 


ad 


-Each Local Correlation Module (LCM) takes 5 seconds to 
execute, 


-each Dual Common Region Correlation Module (CRCM) takes 
5 seconds 


mama the Triple CRCM takes 2.5 seconds. 

If one SBC was available, then the total execution time 
Between the unloading of the SCAN REPORT BUFFERS and the conm- 
pletion of the correlation process would be 20.5 seconds 
(sum of the above times). This time should then be doubled 
MmmemmerOss-cOrrelation 1S required between data produced by 
m@emradar Sroup and another sensor type group (e.g. sonar). 

Eyeeusing the multicomputing scheme proposed in this 
thesis, this time can be reduced to 5.5 seconds (for the 
Saar module complex level). This reduction requires the 
Memon tour SBCs. The time lines otf module execution for 
em@eeand four SBCS respectively are shown in Figures V-1 and 
femme. 2, 5, 4, 12, 14, 2353, and 125 are correlation processes 


corresponding to radar sectors and common regions}. 
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Pacure V=2. tTime-=-ane Analysis with Four SBCs. 
Moen) FOr the proposed system, the execution of the processes 


Pierce... does not take a fixed “amount of time. 
Irrespective of this, the time-line analysis of the 
execution of the processes by the multicomputer sys- 
tem looks similar. 

Mie apove Eieures illustrate the minimization of the 
eeceem S response time. To maximize the throughput, four 
femeenobCS have to be utilized in such a way that while the 
m@leetirst ones are busy executing the LCMs, the remaining 
meemosed fOr running the CRCMs for the data of the previous 
Meee tation cycle of the system (radar scan periods). This 
memeeerustrated in Figure V-3. 

The above improvements can at the best increase the pro- 
cessing power of the system linearly [Ref. 41]. By adding 


femmes obCS to the system (more than 8) no turther improvement 





is achieved with the proposed set of processes (however more 
Sempucters can be usefull for backup purposes in case of a SBC 


failure). 
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These response and throughput values are theoretical 
Pomese case estimates and are not confirmed by code execution. 
BUS USe€, in Order to transfer data, requires some more time 
Meemuliticomputer systems). The bus access time is at the 
fieeomumn approximately 5% of the execution time of each process 


MmeemeyclesS out of 270 CPU cycles) as in Ref. 49 is stated. 





iiss stor the 8 SBCS of the above example would saturate 
the bus at the 40% level, which would not cause substantial 
merease in the execution time of the processes. 

The bus will become saturated when the number of SBCs 
executing processes in which bus access is the main instruc- 
Mmionetype is increased to 20 (100% busy). In the case of 
the proposed surveillance system the correlation processes 
Mmmeeeethier dedicate a total average of 10% of their execution 
time to bus access. So, the number of SBCs in each one of 
the module complexes of the multiprocessing node could be 
Memeneh as 80 before a bus saturation will occur. 

iiiewsame theoretical approach can be taken for the esti- 
Mation of the number of module complexes that can be attached 
memene Multiprocessing mode's bus. Here, each module complex 
meeeceche place of a processor and acquires access to the 
Piomthrough a private bus switch. Assuming that 5% of the 
memetic Of the bus of the module complex is I/0 to the module 
momorex, a Maximum of 20 module complexes can be attached 
Memeene multiprocessing node's bus. 

lies above eStimates give a sense of the processing power 
mameene multicomputer svstems with multilevel bus architectures. 

The difficulty faced with these systems today is that 
they have not been widely implemented (even if the hardware 
=e commercially found) and that the OS to orchestrate 


meer Operation is highly complex. 
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B. PERFORMANCE IMPROVEMENTS BY ADDING A NODE TO THE NETWORK 
By adding more nodes to the network in order to cover 
@ieescame Maritime area, a different partitioning of the geo- 
Praphical area iS required (smaller subareas). This, on one 
m@omd would simplify the calculations and reduce the response 

time at the node level, but would have as a result an in- 
m@ecased mumber of inter-node transactions since the problem 
memmnlcinode coordination will become greater. This increased 
number of transactions would cause greater communications 
Meravys On the ring and would reduce the responsiveness of 

the system as a whole. 

Mmicmedse where the addition of extra nodes to the network 
memmermorove the performance of the system is when an extension 
meme SUrveilllance area limits is desired. Then a new sub- 
@t@ea is added and an extra node is linked to the ring channel 
memeicrease Of the length of the ring may be required too). 
Swemean E€Xpansion will provide the surveillance system with 
Semexpanded surveillance area and the C3 functions will be 
performed more extensively. 

The hardware/software modifications which would be needed 
meee ECXisting multiprocessing nodes are minor and isolated 
momene 1/0 modules which serve the ring interface unit. As 
imerdma be seen, the ring network is easily expandable to 
more nodes. 

oman outline Gt the above discussion, the performance of 


the system may increase or decrease with the addition of a 





Bewemede to the ring. This depends on whether or not the 
Mew node Creates substantial traffic congestion on the ring. 
meeencering MS operating Mear capacity already, the addition 
wea mode may Cause a bottleneck which decreases response 
meienwon the ring. In most cases, however, the ring has 
excess capacity and consequently the addition of a node is 
aeeeby accomplished and increases the overall performance of 


the system. 


fee COMPARISONS WITH EXISTING SYSTEMS 
Most of the currently fixed surveillance systems are 
ieee d On Centralized architecture concepts and suffer from 
w@memarsadvantages Of that system category. On the other hand, 
miece Systems are simpler in design and they do not require 
memertcated Synchronization and coordination overhead as does 
mimemdrstributed C3 system proposed in this thesis. A general 
me@aGasoOm Of this system with the centralized systems follows. 
mee raiiure Tolerance 
icweaiiine tolerance mechanisms for a centralized 
System are simple to design and they assume a smooth system 
Operation. The weak point of such systems 15 the central 
Memecontrolling) node which, if it fails, can cause the fail- 
ure ot the whole system. 
As has been described in the previous chapters, in 
Mmiemoranosed system there is no controlling node with any 


meme Oot a Special structure. All nodes have the same processing 
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power and can act as coordinating nodes or independently. 
ams way, the tailure of the ring or of an individual node 
mele not interrupt the operation of all of the system. 

At the multiprocessing node, the advantages offered 
ieee proposed multicomputing schema are such that the sys- 
tem can withhold a great many hardware failures which would 
Demiard Or even impossible for a traditional computing system 
to cope with. 

Nomemresule Op ene apove, the supyvivability of the 
meoposed distributed surveillance system is much superior 
momeme SUrVivability of the centralized surveillance systems. 

fee oystem Expansion 

Gentralized systems are easy to expand if there is 
excess capacity in I/O ports, memory and processing power. 
Mmepamy Of these three capabilities 1S at its limit, a new 
System must be used. 

imc nDmepesed SYStem, On the otner hand, iS not 
meer icted by these capacity limits. Modular expansion at 
maeenode jevel has theoretically no limit (by adding more 
memes Of busing). “Node expansion iS easSv and is done by 
Simply adding more nodes to the ring network (at the repeater/ 
amplifier points). However, this node expansion 1s somehow 
jmermnrreced by the capacity of the fiber-optic ring. By in- 
Mmeeooims the traffic on the ring, data transfer times become 
Meee and the performance of the system in terms of respon- 


Seveness 1S degraded. 





So. Programming Ease 

CL aero ewancmroreaistriputced Systems, like the 
one proposed in this thesis, is generally more complex and 
mame COMnsuming than an equivalent program for a centralized 
memewcer. Fault tolerance software 1S complex and requires 
Beecial programming skills. A larger proportion of the 
programmers must be familiar with writing system's programs. 
systems synchronization primitives must be used throughout 
the code. The real-time performance requirements imposed 
for the proposed system add an extra level of difficulty and 
limit the spectrum of the programming languages that can be 
msed. 

iMvemecciUGdtin gece stay cli lance systems are better un- 
derstood because of the longer experience with them. Although 
the real-time synchronization problems can be more difficult 
MmampoeanidTrOCeSSOT case, many vears of experience with time- 
eeweine has helped to resolve these problems. 

Syeoudieweie —uniprOecessor centralized systems are 


easier to program than the proposed multicomputer system. 
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VI. CONCLUSIONS 


Swe MENDABILITY OF PROCESSING POWER 
itimougnout tie deseriptiom, of the design of the conceptual 
model and its performance prediction and evaluation it has 
Meemesnown that the proposed surveillance system architecture 
Merers a Granular expandability of processing power. Multi- 
memeucer architecture and surveillance task partitioning are 
meo@econcepts which have contributed most to this expandability. 
ieee iW) t 1-COMpUtING 

Memmi lmireemoutine Schema Of multi-level bussing that 
feoeused, has given the system an almost unlimited expansion 
Breaoliity. Even if the proposed system has two levels of 
mieeane, its further expansion into lower level buses can 
Hemsoustained in terms of bus capacity. 

iiesicaeiresOretne = problem has allowed this architec- 
Mires tO De implemented. Almost all of the computations can 
Saeeameormcd ameparallel. The limit where both the response 
Geme and throughput parameters cannot be further improved 
Without changes in algorithms was estimated. These limits 
@emicmecdsbyethne duration of the three phases of correlation 
(lecal data correlation, multi-sector region data correlation 
emer oss-CcOrrelation of data coming from different generic 


types of sensor groups (e.g. RADAR/ESM)). 
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PeveotnOd) wOmpreaict Dus Saturation conditions was 
mecca. but actual calculation of the exact number of SBCs which 
mould jead the system into such a state was not done. This 
Hequires precise timing of the execution of the software 
moawies at the experimental level. This task constitutes a 
Seaarbenge for further work on the evaluation of the proposed 
ey stem. 

eeeeeatea Fartitioning 

Pav teeseloOnincwrne major surverliance area into four 
Meeeraphical subareas, the processing power of the system was 
miereased subStantially. This increase has given the proposed 
Menem the Capability to process almost 4 times as much data 
Memon equivalent centralized system during the same time 
Span. 

(ihemeineemetvwerk arenitecture was shown that 1s able 
Memeo pOort this partitioning very efficiently and allows the 
me@et10n Of extra nodes to the network with a relatively low 


overhead. 
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ia ero Thor OnGelc ring network can be viewed 
ema clobal bus which 1S in addition to the two levels of 
faivaile?d bussing at multiprocessor and module complex level 


(as shown in Figure VI-1). 


Pee FALLURE TOLERANCE 
The fault tolerance mechanisms of the proposed surveil- 
Mamec system have been discussed at length in the various 
Chapters of this thesis. The main areas where special atten- 
meee nas been drawn are the possible major failures at the 
Moce and at the network levels. 
meeerault folerance at the Node Level 

At the module compiex level the addition of an extra 
memeer Of nondedicated SBCs ensures that a hardware failure 
Mean obCG Will mot create any gap in data processing and will 
fiers tOow down the operation of the complex. A combined hard- 
Ware/software fault tolerance mechanism permits a better 
Mem@armne Of the high target density situations at the indi- 
femal radar sectors. However, some further improvement of 
the method towards flexibility is believed to be possible. 

iceman enecmOL a second multiprocessor node parallel 
bus (standby bus) allows the bus switching mechanisms of the 
miemvidual module complexes to switch to it whenever the main 
meee xperiences a failure. 

Sensor failures are handled efficiently by eliminating 
miiemexecution of the Multiple Common Region Correlation 


meamles which the failed sensor's sector covers. 


iow 





Pima hy weowmcmolicarinempoth the Loeal and the module 
@emplex Shared memory, the reliability of the system at the 
node level is substantially increased and data losses become 
improbable. 

2. Fault Tolerance at the Network Level 

A variety of failures can be sustained at the network 
Mevel of the distributed system. These start from physical 
meper-Optic Chanmel failures and go as far as Global Data 
Base (GDB) failures. 

IMiemoOraumsloweserea Standby ring channel for the 
network and the mechanisms used at the network ring interface 
momes OF the nodésS, aSSuresS an uninterrupted [flow of data on 
miemm@etwork under the most probable failure conditions. The 
Eme@mebility of fiber-optic ring saturation iS minimized with 
m@emexistine SLOW/FAST mechanism which reduces the traffic 
em che channel. 

The redundancy of the GDB is an extension of the 
MemeaestOrage backup concept adopted at the node level and 
Semres data availability at any instant in time. Mechanisms 
which are able to detect, cure, and recover from failures 
in the system have also been presented. 

Node failures are handled as gap filling cases, where 
the adjacent nodes take over the control of the failed node's 
sensors and weapons systems. 

As a result of these mechanisms and built-in backups, 


meewtault tolerance of the system as a whole increases 





EuMstantctlally. Further improvements can be made in the 


meeevery phase Of each one of the failure cases. 


ee MISCELLANEOUS 

Nodes sdtuiration,as a result of highly dense target en- 
feeeomment in the geographic subarea it serves, is handled 
through the OVERLOAD/RELAXED mechanism which takes advantage 
mee CX1Sting alternative control lines for all the sensors 
mpemweapons systems. The control of some predefined number 
Memeene Sensors is assumed by the adjacent nodes and the 
Meenrloaced node 1s relaxed. Recovery from the saturated 
meaeeceneecds to be elaborated in more depth. 

ie cost Of the proposed system in comparison with the 
Beemsting ones is less in terms of hardware at both the network 
and the node levels. In terms of software, the creation of 
meee cessary code would require a greater and more specialized 
Peoecamming effort which makes the initial cost higher than 
Memmerne Cxisting systems. The advantage is that the predicted 
Beetware Maintenance cost is low as a result of the modularity 
@eethe design. 

Sisteal Security Of information is provided through the 
MeenwoOr Underwater fiber-optic channels (main and a standby) 
femeeare very difficult to intercept without being detected. 

The option that the person who is given the empire respon- 
Suemrity for surveillance may be stationed at any one of the 


Subarea sites (nodes), adds a lot of operational flexibility 





memchne system. On the other hand, individual subarea Com- 
mander's independence is fully supported by the selected 
mrstribution schema. 

iiescodimg ef tne Software precesses of the radar module 
—Semplex WwaS partially done and no coding for the cross- 
memrelation module complexes is included in this thesis. 
mars Makes it impossible to accurately estimate the time 
requirements for the completion of the whole data correlation. 
Only rough estimates have been given, which may substantially 


meerrer from the actual times. 


D. RECOMMENDATIONS 

Maes thesis Can be Characterized as a preliminary sur- 
veillance system design. Most of the principal design 
memeepts have been discussed but many areas of the problem 
Maye not been elaborated in depth. 

Horethe potential implementors of the proposed systen, 
a great amount of work remains. The system is tailored to 
be implemented in a coastal or archipelagic ocean area where 
the various sensors and weapons systems can be installed on 
@eestal, and offshore island/islet sites or on the sea bed. 
Power supply, maintenance, transportation, and communications 
requirements (other than the ring network) are also areas of 
eemeern. 

For the people who would like to continue this work, a 


immer coding remains to be done for both the correlation 
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and cross-correlation modules, and the network communications 
protocols. Testing of some parts of the proposed systems 
can be done by the use of a small number of SBCs available 
at most microcomputer laboratory installations. 

The author of this thesis would greatly appreciate being 
informed of any future work on the area by mail or by being 
maeluded in the distribution list of related papers and 


theses. 
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